SECURITY

Restricting access to a server's data directory
By default, any IBM® Lotus® Notes® user who can access a server can access the server's entire data directory. You can restrict Notes user access to a server's data directory or a subdirectory of the data directory by defining an access list, or ACL file, for it. ACL files are an option for protecting server directories, and contain the names of users authorized to access those directories.

In order to use ACL files, you need to set the Notes.Ini variable Enable_ACL_Files=1.

Note ACL files are different than the access control list (ACLs) used to manage Notes databases, although both serve the same function of restricting access to the directory or database, respectively, they protect.

Creating a data directory access list

1. Make sure you have at least database administrators access to the server.

2. In the IBM® Lotus® Domino® Administrator, click the Files tab.

3. In the left pane, select the directory to which you are restricting access.


4. In the Tools pane on the right, select Folder - Manage ACL. The Manage Directory ACL dialog box appears.

5. Below "Who should be able to access this directory?" click the person icon. Do the following for each name that you want to allow to access the directory:

6. When you are finished defining the access list, click OK.

7. Click OK again. In the left pane, the directory icon now appears with a padlock.

Changing or deleting a data directory access list

1. Make sure you have at least database administrators access to the server.

2. In the Domino Administrator, click the Files tab.

3. In the left pane, select the directory with the ACL that you want to change. The directory icon has a padlock.

4. In the Tools pane on the right, select Folder - Manage ACL. The Manage Directory ACL dialog box appears.

5. Do one of the following:

6. Click OK to save your changes.

Related topics