RE: WebQuerySave agent and Readers fields Rich Schwartz 6.Apr.12 02:28 PM a Web browser Domino Server All ReleasesAll Platforms
No matter what the settings on the WQS agent, the HTTP task first has to determine whether the user has rights to save it. Once the server has determined that the user does have rights, the agent is run and it is assumed that the agent needs to have the rights to the document -- so the documentContext is opened with the user's rights. Everything else will be opened with the signer's rights, unless "run as web user" is selected.
However, if I'm reading what Stan said correctly, "everything else" really means that only documents in other NSF files will be opened with the signer's rights. My initial reaction to this was that I thought Stan was wrong about that... but thinking about it from a Notes C API perspective, I think he must be right. I.e., the way to specify an alternate identity in the C API is by passing a NAMES_LIST structure to the NSFDbOpenExtended function. Of course it's possible that there's a non-public API that the HTTP task uses to provide a NAMES_LIST at the document level, or that there's a way for it to open the same NSF twice with different NAME_LISTS, in which case Stan could be wrong... But without tests to prove otherwise, the default assumption should generally be that Stan is right ;-)
Return to top
. . . . . . . . . . . . . . RE: WebQuerySave agent and Readers ... (Rich Schwartz 6.Apr.12) 
Print this page
