« DomainPatrol 4.0 released during Lotusphere Opening General Session | Main| Install Shield Tuner for Lotus Notes 8.0.x »

Set ACL For Mailfile Owner - Solution

Category

Ulrich Krause presented an idea at ideajam about Set ACL For Mailfile Owner, this is in response to this idea.

We all know that we can set multiple entries in the ACL of a set of databases at once using the Domino Administrator  client.
But one option is missing. An example: You want to set the access level for a mailfile owner to Editor and enable a few options and assign a role or two.

From a developers point of view it is easy. You can write an agent. But as an administrator you normally do not write agents in LotusScript. You use your admin client.

Unfortunately there is no chance to do this today.
Pls. IBM, enhance the admin client and give us the ability to change the ACL of multiple databases. The ACLEntry to be changed has to be dynamic. ( i.e. the value of the owner field in the calendar profile of the mailfile)

I've already asked the people at Ytria , if this is possible by using aclEZ; it seems, that there is a chance to accomplish the aim.


Paul Mooney suggested The mail file ACL changing tool. I'm presenting another solution here. I hope you like it Paul.

As stated the code is not the problem, but to be able to run it from a userinterface where you can select the mail databases that you want to act on and that an Administrator without programming skills can use it when its needed.

You all know the userinterface for the Domino Administrator Client and I have been working for quite some time on the DomainPatrol project to be able to present a similar interface to the user with functionality that can not be seen in the Domino Administrator Client.

It looks like this:

A picture named M2

This interface show all databases on all servers and you can use FullText Search to find the ones you want to act on.
There are a lot of actions built in that you can use - but not the one requested by Ulrich Krause.

Well I thought this would be a pretty neat action to run on selected mail databases so I thought I should implement it.
The problem that I'm presented with is that I get a lot of request for more functionality within DomainPatrol all the time. If I were to implement them all the product would be hard to support in the long term.
So I came up with another idea to remedy the support problem and this is what it ended up in.

I have created a framework with DomainPatrol to let users save code in documents instead of in the design - I call these documents User Defined Actions.

The User Defined Actions can be imported/exported to dxl files. The implication of this is that an Administrator could get a User Defined Action from someone that coded it and run it in the DomainPatrol environment without any programming skills.

I have worked with the framework for executing the User Defined Actions for some time now and I think it is ready for exposure.
The framework itself handles all sorts of things that you don't have to code on your own, like error logging, context handling, display of progress bars, security checks on who can run User Defined Actions and so on.

Lets say that you already have DomainPatrol installed - Oh, for you that are not familiar with DomainPatrol it migt be good to let you know that it is Open Source and free to use.

Having that said - lets go back to the scenario that you already have DomainPatrol installed. All you have to do is download this User Defined Action and import it into DomainPatrol. This is done in the "Setup >> User Defined Actions" view.
Be sure that you let someone you trust check out the code before you run it - of course. Make any obvious changes to the code that you would like. Select the databases that you want to run the User Defined Action against and click "Run User Defined Action..." and select the action that you want to run.

I'd like this to be as simple, stable and flawless as possible so if you decide to take it for a testrun - please write a report on it.
I would also, very much, like to be challenged on what you can be accomplish using the User Defined Actions framework in DomainPatrol.

I will now go ahead and publish the second, stable but not very documented release of the DomainPatrol Template 4.5 b2.

You can find the template here

And I will also publish the User Defined Action to solve the Set ACL For Mailfile Owner.
Be adviced that you need to change the acl settings within the User Defined Action code - it is very well documented and I think it will be very easy for any Administrator to do the changes without any help from a Designer.

You can find the action here

So again, please let me know what you think and if there are any User Defined Actions that you think would be useful - maybe I will provide them for you. I'm always up for a good challenge.

My very best,

Peter Närlund, DomainPatrol

Comments

Gravatar Image1 - @Peter: I'm happy that you like my idea. User Defined Actions are a great idea to enhance database / product functionallity. On this years "Entwickler camp 2008" in Gelsenkirchen, Germany, Anton Tauscher presented his session "Dynamische Aktionen" { Link } We are using his technique in the open source project !!HELP!!.

Gravatar Image2 - @Ulrich: Despite that i failed my German class in school I realize, by reading the presentation, that someone has made an effort building that Framework. It looks great and I think I will from now on refer to my implementation as something else than a Framework. Maybe I will call it a function or feature of DomainPatrol.

Thank you for sharing the implementation in !!HELP!! I might be able to use that as well when it comes to integrating functionalities within DomainPatrol with customer specific applications.

It would be nice to hear from you how you like the implementation in DomainPatrol from an Administrators perspecive in comparison to the Domino Administrator Client.

I know that I will run a slightly modified version of the "Set ACL For Mailfile Owner" User Defined Action on a couple of thousands of mailfiles tomorrow.

Let me know if you miss any other functions in the Domino Adminstration Client that would be good to run against selected databases, agents or why not servers. I will give it a good effort to give you something useful in return.

Gravatar Image3 - These ideas sound very cool. I've used Domain Patrol in the past. It's a significantly important tool.

Post A Comment

:-D:-o:-p:-x:-(:-):-\:angry::cool::cry::emb::grin::huh::laugh::lips::rolleyes:;-)

Calendar

Subscribe to This Blog

About me

Peter Närlund

At one time in my life I was teaching:

  • Application Development 1
  • Application Development 2
  • Application Development 3
  • Domino Web Development
  • Developing Internet Applications
  • Developing Interactive Internet Applications for Notes Developers
  • Internet Development with Lotus Notes Domino (QA Training Course Material)
  • Introduction to Lotus Script in Notes
  • Introduction to the Notes Object Model
  • Advanced to Lotus Script in Notes
  • Systemadministration 1
  • Systemadministration 2

Managed to pass the following exams:

  • ITIL v3 Foundation for IT Service Management
  • Microsoft Certified Professional
  • Certified Netware Administrator
  • OS/2 Certified Somethingl
  • Lotus Notes CLP Principal Application Developer lvl 3/3 R5
  • Lotus Notes CLP System Administrator lvl 2/2 R5
  • Lotus Notes Certified Teacher R5

I have also passed all exams for R6 and R7 but I can't remember their names ;-)

I am fluently developing using:

  • LotusScript
  • Java
  • JavaScript
  • HTML
  • XML

I once knew how to program using:

  • Pascal
  • Basic
  • Assembler

Currently learning:

  • C/C++
  • ITIL
  • Eclipse Plugins
  • BIRT

Current projects:

  • My family
  • DomainPatrol
  • DominoRSS

Dropped projects:

  • Golf - I was formerly a PGA Tournament Player - no success

Other professional interests:

  • FIRO
  • The Human Element
  • Organizational development
  • Process development