Changes in ECL permission defaults for R5.0.2

06 History of changes

Client
Changes in ECL permission defaults for R5.0.2

Changes in ECL permission defaults starting in R5.0.2

The ECL entries for -Default- and -No signature- have been changed in R5.0.2. These entries now have no permissions checked.
The ECL dialog has been changed. You will no longer be prompted to trust everybody in the organization of the user whose signature you are about to trust.

If you have already implemented Execution Control Lists (ECLs) and your Administration ECL has been configured in the Domino Directory, these changes should not affect your existing Security infrastructure when setting up a new Notes Client from the Domino Server.

You will be affected if you are setting up the Notes client without being configured from the Domino Server. In this case you are running client setup in a Island (disconnected) location. You will need to modify your ECL entries to conform with your existing ECL Security model. This can be done manually or automatically in several ways.

You could also be affected if you are using your Notes ID for the very first time in a shared workstation environment. This is applicable when more than one user shares the same Notes Client on the same workstation. The very first time a Notes ID is used, Security Options in the form of ECL entries are generated for that user and stored in the file desktop5.dsk, if the options do not already exist. All the standard ECL rules apply.

Regardless of how you deploy ECLs, Lotus recommends you see the Release Notes document "Recommendations for deploying tighter ECLs" for more details.