Problem solve Get help with specific problems with your technologies, process and projects.

Need to eliminate the menu copy function for certain user groups

We have an application where we need to eliminate the menu copy function for certain user groups within this database. Can this be accomplished through ECL and can you point us in the right direction?
I'm not sure I understand perfectly your question, so if I'm off the mark, please go easy on me. :o)

To make things clear, I assume that you want to disable the "Prevent Copying" feature present since Notes R4.0. I also assume that you want to enable this, but only for certain people. Finally, I assume that you wonder if (and if so, how) that can be done with ECLs.

Regarding the "Prevent Copying" feature (from technote 137345)...

This feature, which has been available since Notes R4.0, permits you to prevent people from copying a message that you send. This includes copying with the clipboard, forwarding, replying with history, and printing.

As noted in the Notes On-line Help, the "Prevent Copying" feature is only a deterrent. It is not a security feature. There are other ways in which recipients can copy (or forward or print) a message.

The confidentiality for this feature is maintained via a field, $KeepPrivate. In documents for which this feature is enabled, the $KeepPrivate field has a value of 1. If a recipient has the ability to create and run an agent to strip this field, or to set its value to 0, the recipient will be able to print, forward, or copy the document to the clipboard.

In addition, in Notes 4.x, it is possible to access and copy data from these documents via the Document Properties InfoBox. This particular issue was reported to Lotus Quality Engineering and was addressed in Notes 5.0. In Notes 5.x releases, it is not possible to copy the field contents from the Document Properties dialog box because it is grayed out.

Regarding Execution Control Lists (ECLs, some of it from technote 183050)...

The Execution Security Alert dialog is a warning message. It is letting you know that someone has requested an action that he or she is not allowed to execute because of what you specified in your Execution Control List (located in User Preferences under Security Options). By default, protected operations for scripts, code, and formulas not specified in the ECL, whether signed or unsigned, cannot execute on your workstation.

ECL settings are stored in the DESKTOP5.DSK file. If you restore your original desktop file, you will retain your previous ECL settings.

Beginning in Notes 5.0.5, there is a "Refresh" button available on the Workstation Security dialog box. Selecting this button updates the ECL settings from the Administration ECL on your home server. The Workstation Security dialog box displays by selecting File, Preferences, User Preferences from the Notes menu and then selecting the Security Options button on the Basics tab of the User Preferences dialog box.

You receive the default ECL settings when you install a new Notes client onto a machine that is not connected to the network during setup.

So, to answer your question. "Prevent Copying" is not a security feature and is an "all or nothing" proposition. You either set it for everyone or for no one. As for perhaps toggling this via ECLs, well ECLs deal with the specific execution of code, whether for scripts, codes or formula. However "Prevent Copying" is not something that is done via a script, user-written code or a formula, so it doesn't trigger an Execution Security Alert dialog when attempted by a user that doesn't have that right.

Dig Deeper on Lotus Notes Domino Administration Tools

Start the conversation

Send me notifications when other members comment.

Please create a username to comment.




  • iSeries tutorials

    Search400.com's tutorials provide in-depth information on the iSeries. Our iSeries tutorials address areas you need to know about...

  • V6R1 upgrade planning checklist

    When upgrading to V6R1, make sure your software will be supported, your programs will function and the correct PTFs have been ...

  • Connecting multiple iSeries systems through DDM

    Working with databases over multiple iSeries systems can be simple when remotely connecting logical partitions with distributed ...