A new feature in Notes 8.0.1 provides a "white list" which consists of allowed update sites. When the white list option is used, the update sites specified in individual components can be ignored and the provisioning system will look to the sites listed in the white list only. The white list can be configured by the server administrator.
The white list can be defined as an IBM Lotus Domino or IBM WebSphere Portal policy.
There are fields in the policies that are read by the Composite Application Editor (CAE).
Enabling a white list
In order to include the URLs of update sites contained in the server side white list, the following options should be set.
WebSphere Portal: Check the Enabled box on as indicated in figure 2 below.
Lotus Domino: Check the 'Yes ' box on in the 'Provisioning settings are enabled' field. See figure 1.
These settings do not prohibit access to a local or remote update site.
Restricting exclusive update sites with white list
This setting indicates that only the URLs of update sites specified in the white list are allowed access. It will only have an effect if the setting above is enabled.
WebSphere Portal: "White List"
Lotus Domino: "Allow client updates only from these sites"
Definition of sites to be contained in white list
On Portal this is a '|' separated list of URLs.
On Domino this a defined list of URLs.
Setting white list policy for Lotus Domino
Launch Domino Administrator Client.
Select Server -> Configurations.
Open "All Server" configuration or add a new configuration for a specific server(s).
Select "Client Upgrade" tab.
Select "Provisioning" sub tab.
From here the settings can be set and the list of sites for the white list can be added and selected.
Setting Whitelist Policy for WebSphere Portal 6.0.*
Log into WebSphere Portal Server as an administrator using a web browser.
Browse to Administration -> Access -> Resource Polices.
Select the drop down menu for "Manage Update Site White List" and click "Edit Policy".
Here you can choose your settings and edit the '|' separated list of URLs.
Options in Composite Application Editor
When you select "Add Components from Update Site" from the palette context menu there are three possible variations to the UI depending on the settings set in the policy.
1. If no option is set (this is the default in the absence of a policy) then the user will be provided with a dialog where a local or remote update site can be specified.
2. If the "Enabled" (Portal) or "Provisioning settings are enabled" (Domino) option is set on the server and the list of sites in the policy contains at least one valid URL then the user will have the option of choosing from the white list of sites as well as the regular choice of a local or remote update-site.
3. If the setting in 2. is enabled and if additionally the "White List" (Portal) or "Allow client updates only from these sites" (Domino) option is set, then the user of CAE will only be able to choose from the list of URLs specified in the white list policy.