Question

I’m currently implementing the OpenNTF Multiple File Uploader by Mark Leusink.

This very nice custom control uses an xAgent to embed the selected file attachment into the target Notes document. Everything was working fine until I added Authors and Readers fields to the Notes documents. Now I’m getting a security error (402) when uploading the file.

My thought is the Upload xAgent can’t edit the target document to attach the file. If I remove the security fields, everything works again.

My question is, do xAgents run with the same security as the current user? If not, can I set a “run as” user for the xAgent like I can for a Lotus Script agent?

Answer 1

I’d suggest that you look at the xAgent’s code and rewrite it to use sessionAsSigner to access the database/document to upload the file. This will cause it to run as the signer of the application and bypass the security issues that your running into.