Front cover - IBM Redbooks

436 Lotus Security Handbook
Table 11-2 Default ACL for the Web Administrator database
Authenticating administrators
You can use either an Internet password or an SSL client certificate to access
the Web Administrator. The Web Administrator uses either name-and-password
or SSL authentication to verify your identity. The method the Web Administrator
uses depends on whether you set up the server or the Domino Web
Administrator database (WEBADMIN.NSF), or both, to require
name-and-password or SSL authentication.
To access the Web Administrator database, you must have name-and-password
authentication or SSL client authentication set up on the server.
Name-and-password authentication is enabled for the HTTP protocol by default.
11.1.4 Programmability restrictions
New for
Domino 6
Default name Access
User and group names listed in either of these
fields on the Server document:
Full Access Administrators
Administrators
Name of server Manager
- Default - No access
Anonymous No access
OtherDomainServers No access
Manager with all roles
To control the types of agents users can run on a server, you can set up
restrictions for server agents in the Server document. As with administrator
access, the list of server agents in the Server document is organized
hierarchically with regard to privileges. “Run unrestricted methods and
operations” has the highest level of privilege and “Run Simple and Formula
agents” has the lowest. A user or group name in one list will automatically
receive the rights of the lists beneath. Therefore a name has to be entered in
only one list, which then gives that user the highest rights.
Tip: Create a group for each class of users to be used in every category.
Run unrestricted methods and operations
Users and groups in this category are allowed to select, on a per agent basis,
one of three levels of access for agents signed with their ID. Users with this