Self-Help Desk Feature: Role-Based Security

The Self-Help Desk application has three types of users:

Role	Database Access	Description
User	Author	Can read all documents and can create only these types of documents: Forum, Response, Response to Response, Request for Service, Problem Report. Most people that use this application are in the [User] role.
HelpDesk	Author	[User] capabilities plus edit Problem Report and Service Request documents created by users (cannot edit Forum/Response documents). Can also create these document types: Announcement, Download, FAQ, Policy, Tip, Tutorial/Topic, and can edit these documents that they create. Only a few people are [HelpDesk] users.
DBAdmin	Manager	[HelpDesk] capabilities plus edit all documents created by [User] or [HelpDesk]. Can also see/click the Application Settings action in the navigator and open the Rating Queue and Update Queue views. Only one or two people are defined as DBAdmin users.

The user's role is defined in the database Access Control List (ACL).

The roles are used to limit what users see and do in the database. For example, the Navigator contains the Administrator Menu option for database administrators:

• Approval Queue: Click to open a view of documents that need to be approved before they can be read by all users.
• Mail Box: Click to open a view of memos that have been mailed into the database. If you have autoprocessing turned on, you can largely ignore this view, as memos will be automatically morphed into a Problem Report or Service Request. The Mail Box view also contains the rules for determining how to morph incoming memos.
• Rating Queue: Click to open the view of pending document ratings and manually compute the ratings.
• License Packs: Click to open the view containing license pack documents. At database startup, the number of licenses is compared to the number of active users.
• User Activity: Lists the active users of the database.
• Application Settings: Click to open the Application Settings.
• Access Control List: Opens the database ACL.
• Domino Directory: Opens the Domino Directory on the server to the Groups view.