APPLICATION MANAGEMENT


Maximum Internet name-and-password access
Example

Users who have Internet or intranet browser access to a database cannot be identified by Notes in the same way Notes users are identified. Use the "Maximum Internet name & password access" setting in the ACL to control the maximum type of access that Internet or intranet browser users have to a database. The list of available access levels mirrors the standard access levels for Notes users.

This setting applies to users who use name-and-password authentication or access the server anonymously over the Internet and connect to servers using either the TCP/IP port or the SSL port. This setting does not apply to users who have SSL client certificate IDs and who access the database over the Internet on the SSL port. Users with SSL client access receive the level of access specified in the database ACL.

Add an entry for the group Anonymous to the database ACL, if appropriate for this database. Then select the maximum access level you want to assign to all Internet and intranet users who use name-and-password authentication for a particular database. Users who access a Notes database over the Internet, either anonymously or by using name-and-password authentication, never have an access level higher than what is specified as the "Maximum Internet name & password access" level.

Caution The "Maximum" access level overrides the access level that a user may have been explicitly given in the database ACL.

For example, a user, Sandra Smith/West/Sales/Acme, can use a name and password to access a server using a Web browser. If Sandra Smith/West/Sales/Acme is assigned Editor access in the ACL and the "Maximum Internet name & password access" setting is Reader, the lower of the two access levels applies and Sandra is allowed only Reader access. Similarly, if Sandra Smith/West/Sales/Acme is assigned Reader access in the ACL and the "Maximum" access setting is Editor, Sandra is allowed only Reader access. If Sandra Smith also uses a Notes client to access the database, the "Maximum" access setting is ignored and Sandra is allowed Editor access.

The default for this option is Editor access. Tasks such as creating folders, views, and agents, do not apply to Internet users.

Tip You can use this setting to prevent Internet users from accessing the database using name-and-password authentication. By setting it to "No Access," the database is accessible only to IBM® Lotus® Notes® users or Internet users who authenticate using SSL client certificates.

To select the maximum Internet name and password

Use this method to select the maximum Internet name-and-password access for a single database.

1. Make sure that you have Manager access in the database ACL.

2. Select the database icon from your bookmarks page.

3. Select File - Database - Access Control.

4. Click Advanced.

5. Select the maximum access level from the list next to the field "Maximum Internet name & password."

6. Click OK.

Example
See Also