The maximum ACL size limit for all entries, roles, and log is 32,767 bytes. ACL Dominator allows you to monitor all your databases by including an "ACL Size" report.
More Information:
http://www.notesmail.com/ACLdominator
The max number of ACL entries is ~950 names (total ACL size is limited to 32767 bytes), and the max number of ACL roles is 75. This information relating to the number of ACL entries may not always be true. This is because the number of ACL entries is defined by the maximum size to which the ACL can grow. The ACL can grow to a maximum of 32767 bytes. Each entry takes 21 bytes plus the length of the name being added to the ACL. Because of the way this data is stored, this value is rounded up to the next even number. In addition, space is taken up by the log entry that is written.
This usually happens when are changing the DB ACL frequently using agents (or frequently chaning an ACL over a long duration of time) causing your ACL Log to grow large and meet the 32767 byte ACL size limit.
The ACL Log History is part of the ACL. The only way to clear the ACL Log History is to clear the entire ACL.
To clear the entire ACL through Notes: Make either a new database copy or a *new replica - and uncheck the option to copy the Access Control List. The exact steps are provided below.
Clearing the ACL via a New Copy
1. Highlight the database.
2. From the menu, select File, Database, New Copy.
3. Enter an appropriate server and filename. (Enter a different filename if you are copying the database to the same server or workstation.)
4. Uncheck the copy option of "Access Control List."
5. Click OK.
Clearing the ACL via a New Replica
1. Highlight the database.
2. From the menu, select File, Database, New Replica.
3. Enter an appropriate server and filename. *
4. Uncheck the create option of "Copy Access Control List."
5. Click OK.
* Note: For new replicas, making a local-to-local replica copies the ACL, regardless of the selection. To ensure the ACL is not copied when making a new replica, ensure that you are not creating a new replica from a local database to a local database. This issue of that ACL copying, regardless of the selection, applies only to the New Replica feature.
Again, I highly recommend to get a copy of ACL Dominator which supports weekly ACL Log History snapshots, ACL Size, Corrupted ACLs/DBs, etc. so you can monitor your DB ACL's closely, and to prevent this ACL Size limit problem.
More Information:
http://www.notesmail.com/ACLdominator
-Lance
Return to top
. . ACL is corrupted / ACL is Full (Lance Zakin 1.Sep.04) 
Print this page
