Agent starts but doesn’t execute LotusScript code.

[Database Administrator]

I’ve LotusScript agent.
It works perfect if I run it locally on Notes Client (but just in case
I accept all "Execution Security Alert" alerts).

But this agent doesn’t execute LotusScript code if it’s being run on
Domino Server (7.0.3) as scheduled.
There are no errors in server LOGs. It just shows that agent started
and done correctly.
The problem it that the agent doesn’t execute especially this command:

Call acl.Save

So it doesn’t update ACL of certain database.

The user who signed that agent are in following fields of the server
document:
- Run unrestricted methods and operations
- Sign agents to run on behalf of someone else
- Sign agents to run on behalf of the invoker of the agent
- Run restricted LotusScript/Java agents
- Run Simple and Formula agents
- Sign script libraries to run on behalf of someone else

However the agent doesn’t execute that LotusScript on the server.
How can I enforce the agent to work?

Thanks
Vlad
vpalko999@hotmail.com

[Database Administrator]

On Aug 28, 4:11*pm, vpalko...@gmail.com wrote:
> I’ve LotusScript agent.
> It works perfect if I run it locally on Notes Client (but just in case
> I accept all "Execution Security Alert" alerts).
>
> But this agent doesn’t execute LotusScript code if it’s being run on
> Domino Server (7.0.3) as scheduled.
> There are no errors in server LOGs. It just shows that agent started
> and done correctly.
> The problem it that the agent doesn’t execute especially this command:
>
> * * * * *Call acl.Save
>
> So it doesn’t update ACL of certain database.
>
> The user who signed that agent are in following fields of the server
> document:
> * * - Run unrestricted methods and operations
> * * - Sign agents to run on behalf of someone else
> * * - Sign agents to run on behalf of the invoker of the agent
> * * - Run restricted LotusScript/Java agents
> * * - Run Simple and Formula agents
> * * - Sign script libraries to run on behalf of someone else
>
> However the agent doesn’t execute that LotusScript on the server.
> How can I enforce the agent to work?
>
> Thanks
> Vlad
> vpalko...@hotmail.com

Did you check if the agent signer has manager access to the database
whose ACL is being modified? And also did you select the property
"Allow restricted operations..." in the agent (not sure if this makes
any difference. worth a try)

[Database Administrator]

Yes I did and that "Allow restricted operations with full
administration
rights" is selected as well..
:-(

>
> Did you check if the agent signer has manager access to the database
> whose ACL is being modified? And also did you select the property
> "Allow restricted operations..." in the agent (not sure if this makes
> any difference. worth a try)

[Database Administrator]

wrote in message
news:fd13f406-2ab0-4b08-99e2-8c575fe7ccae@y21g2000hsf.googlegroups.com...
> Yes I did and that "Allow restricted operations with full
> administration
> rights" is selected as well..
> :-(
>
>>
>> Did you check if the agent signer has manager access to the database
>> whose ACL is being modified? And also did you select the property
>> "Allow restricted operations..." in the agent (not sure if this makes
>> any difference. worth a try)
>

Did you make sure you are not using (or even declaring) any UI classes
in the agent?

/Karl

--
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
A: Top-posting.
Q: What is the most annoying thing on usenet?
=============
Visit my blog at http://www.bleedyellow.com/blogs/texasswede/

[Database Administrator]

> Did you make sure you are not using (or even declaring) any UI classes
> in the agent?
>
> /Karl

None of UI classes are declared. What is interesting. It updates the
roles when I add ones but doesn't update InternetLevel. See sample
below. It works locally when the agent runs manually. But it doesn't
work for InternetLevel when the agent runs on a server as scheduled.

Set acl = db.ACL
Call acl.AddRole( "ROLE1" )
Call acl.Save

acl.InternetLevel = 2
Call acl.Save
Print acl.InternetLevel '2 seems the InternetLevel has been
updated but it hasn't when you check the ACL in Notes Client.

[Database Administrator]

Again,

Call acl.AddRole( "TEMPROLE" )
acl.InternetLevel = 4
Call acl.Save

this code just adds new role but doesn't update InternetLevel if it's
being run on server.
If you run this code localy from the agents list it works fine.

So maybe there is some InternetLevel restrictions on Domino server to
change/update this specific option?
Who knows?

Thanks
Vlad

[Database Administrator]

I become a crazy man…

It still doesn’t work with any settings of the agent or server
document.
And as I said before – a new role is added but InternetLever is not
changed. So ACL is changed/updated by the agent run on server. So
there is no any security issues.

See sample below again:
Call acl.AddRole( "TEMPROLE" ) ‘ added after ACL save
acl.InternetLevel = 4 ‘ changed after ACL
save but still has old value after agent finish working.
Call acl.Save

So again my question is: is there some InternetLevel option
restriction on server. Or maybe I need somehow refresh DominoDirectory
after that agent is done.

Again it works fine if I run the agent locally/manually…

Thanks
Vlad