Very Computer

by **Christian Meno** » Fri, 24 Oct 1997 04:00:00

Or simply set in ACL consistence on your ACL, so that the ACL would have
effect locally. it's the same when you want to test roles.

by **Kelly Rya** » Fri, 24 Oct 1997 04:00:00

Enforce Consistent ACL was not available for version 3.x. I think
encryption is the only way to go with this.

Kelly
(remove nospam to reply)

> Or simply set in ACL consistence on your ACL, so that the ACL would
> have
> effect locally. it's the same when you want to test roles.

by **Danny Lawren** » Sun, 26 Oct 1997 04:00:00

>I noticed that in version 3.34, users can open the LOCAL mail file
>database & start reading messages without entering a password. I tried
>several settings with access control, server/ws setup etc. but it seems
>like impossible to protect the local replica file.
>Has anyone got a workaround for this issue ?

Upgrade to R4. That;s the only way you're going to get what you want

--Danny Lawrence, Tiassa Technologies Inc.
Lotus Notes Configuration, Development and Management

"Tiassa Dreams and plots are born" --Steven Brust

by **Charlie Brow** » Sat, 22 Nov 1997 04:00:00

This is not particularly secure. If someone has access to your
workstation, and knows much about Notes, they can get by ACL protection
on local databases pretty quickly, even with "enforce consistent ACL"
set. (I've done it myself!) The only way to really secure local DBs is
with encryption.

> Or simply set in ACL consistence on your ACL, so that the ACL would have
> effect locally. it's the same when you want to test roles.

by **Chri** » Tue, 25 Nov 1997 04:00:00

But who was in the ACL to allow you to bypass it is the question.

> This is not particularly secure. If someone has access to your
> workstation, and knows much about Notes, they can get by ACL protection
> on local databases pretty quickly, even with "enforce consistent ACL"
> set. (I've done it myself!) The only way to really secure local DBs is
> with encryption.

> > Or simply set in ACL consistence on your ACL, so that the ACL would have
> > effect locally. it's the same when you want to test roles.

by **Marc Jaeg** » Wed, 26 Nov 1997 04:00:00

Hello,

Even Lotus doesn't recommend the option "enforce consistent ACL" as a
secure security feature.
With some programming it's possible to go over it.

Regards

Marc Jaegy
Novartis

> But who was in the ACL to allow you to bypass it is the question.

> > This is not particularly secure. If someone has access to your
> > workstation, and knows much about Notes, they can get by ACL protection
> > on local databases pretty quickly, even with "enforce consistent ACL"
> > set. (I've done it myself!) The only way to really secure local DBs is
> > with encryption.

> > > Or simply set in ACL consistence on your ACL, so that the ACL would have
> > > effect locally. it's the same when you want to test roles.

Very Computer

How to pwd protect local mail database ?

How to pwd protect local mail database ?

How to pwd protect local mail database ?

How to pwd protect local mail database ?

How to pwd protect local mail database ?

How to pwd protect local mail database ?

How to pwd protect local mail database ?