I got an interesting question from a friend today..
She asked me if there is any way to control if a Forwarding Address in the person document s external or internal. They don't want external internet addresses as the Forwarding Address.
This is what I responded :
- Using the Forwarding address field in the Person Document: In this case there is no "default option" to control if the forwarding address is internal or external. However, if the company is open to customize the Domino Directory (maybe they are already doing it), we can add an input validation formula in the MailAddress field in the Person form to validate the forwarding address to be internal only.
Do you guys know any other way to do it ?
I'd like to see an option where admins can allow (or not) to use external addresses in the Domino Directory, so we don't have to change the Domino Directory.
Let's see what IdeaJam will think about it.
Thursday, February 07, 2008
Subscribe to:
Post Comments (Atom)
Posts
2 comments:
Isn't the answer here that VERY VERY few people ( the admin and their backup ) should have access to edit the person documents in the NAB and that they should all know the rules against using an external address in the forwarding fields.
Users, Helpdesk staff etc should NOT have access to edit the NAB in any way.
If there is a security concern then you could write an agent that READS the nab every day/week to examine the forwarding field and report if there are any entries that are external addresses. I would not customize the NAB design for a use case like this, too risky and could easily be forgotten about during a server upgrade.
Some organizations allow their users to edit their personal info in the Domino Directory. I worked for a company where users were able to add Address, Phone numbers, etc..
About changing the names.nsf, it is always better not to do it, but if you have a good upgrade plan and good documentation policies you should never forget the names.nsf was modified.
Also, I'd rather prefer a input validation formula running just when a user (or admin, based on the policy) and not an agent running against my Domino Directory.
In any case, all this solution scenario will depend on your policies. And of course, I;d prefer to have an option in the server doc or in the server config doc so we don't have to change the design.
Post a Comment