Agent starts but doesn’t execute LotusScript code.

I’ve LotusScript agent.
It works perfect if I run it locally on Notes Client (but just in case
I accept all "Execution Security Alert" alerts).

But this agent doesn’t execute LotusScript code if it’s being run on
Domino Server (7.0.3) as scheduled.
There are no errors in server LOGs. It just shows that agent started
and done correctly.
The problem it that the agent doesn’t execute especially this command:

Call acl.Save

So it doesn’t update ACL of certain database.

The user who signed that agent are in following fields of the server
document:
- Run unrestricted methods and operations
- Sign agents to run on behalf of someone else
- Sign agents to run on behalf of the invoker of the agent
- Run restricted LotusScript/Java agents
- Run Simple and Formula agents
- Sign script libraries to run on behalf of someone else

However the agent doesn’t execute that LotusScript on the server.
How can I enforce the agent to work?

Thanks
Vlad
vpalko999-at-gmail.com

On Aug 28, 9:54*pm, vpalko...@gmail.com wrote:
> I’ve LotusScript agent.
> It works perfect if I run it locally on Notes Client (but just in case
> I accept all "Execution Security Alert" alerts).
>
> But this agent doesn’t execute LotusScript code if it’s being run on
> Domino Server (7.0.3) as scheduled.
> There are no errors in server LOGs. It just shows that agent started
> and done correctly.
> The problem it that the agent doesn’t execute especially this command:
>
> * * * * *Call acl.Save
>
> So it doesn’t update ACL of certain database.
>
> The user who signed that agent are in following fields of the server
> document:
> * * - Run unrestricted methods and operations
> * * - Sign agents to run on behalf of someone else
> * * - Sign agents to run on behalf of the invoker of the agent
> * * - Run restricted LotusScript/Java agents
> * * - Run Simple and Formula agents
> * * - Sign script libraries to run on behalf of someone else
>
> However the agent doesn’t execute that LotusScript on the server.
> How can I enforce the agent to work?
>
> Thanks
> Vlad
> vpalko...@gmail.com

I expect the signer of the agent has the right to change the ACL so
check the properties of the agent (second tab) if it is allowed to run
understricted operations (from version 7 is this setting in agent as
well)

It is "Allow restricted operations with full administration rights"
selected
for that agent. And signer has Manager privileges for that Database...
So I suppose this is something wrong with Domino 7.0.1 server
configuration...

What can be problem?

On Aug 29, 3:10*am, Martin Humpolec wrote:
> On Aug 28, 9:54*pm, vpalko...@gmail.com wrote:
>
> I expect the signer of the agent has the right to change the ACL so
> check the properties of the agent (second tab) if it is allowed to run
> understricted operations (from version 7 is this setting in agent as
> well)

Change it to option #2. If you set it to #3 (Allow with fill admin
rights), then the signer MUST have Full Access Administration rights.

Tim Mohrlant

vpalko999-at-gmail.com wrote:
> It is "Allow restricted operations with full administration rights"
> selected
> for that agent. And signer has Manager privileges for that Database...
> So I suppose this is something wrong with Domino 7.0.1 server
> configuration...
>
> What can be problem?
>
> On Aug 29, 3:10 am, Martin Humpolec wrote:
>> On Aug 28, 9:54 pm, vpalko...@gmail.com wrote:
>>
>> I expect the signer of the agent has the right to change the ACL so
>> check the properties of the agent (second tab) if it is allowed to run
>> understricted operations (from version 7 is this setting in agent as
>> well)
>

On Sep 1, 9:48*pm, Tim Mohrlant wrote:
> Change it to option #2. *If you set it to #3 (Allow with fill admin
> rights), then the signer MUST have Full Access Administration rights.
>
> Tim Mohrlant

It doesn't work too. What is interesting. It updates the roles when I
add ones but doesn't update InternetLevel. See sample below. It works
locally when the agent runs manually. But it doesn't work for
InternetLevel when the agent runs on a server as scheduled.

Set acl = Database.ACL
Call acl.AddRole( "ROLE1" )
Call acl.Save

acl.InternetLevel = 2
Call acl.Save
Print acl.InternetLevel '2 seems the InternetLevel has been
updated but it hasn't when you check the ACL in Notes Client.

Hi!

And how about Remote Debugging?
The script finished correctly?

L
> It is "Allow restricted operations with full administration rights"
> selected
> for that agent. And signer has Manager privileges for that Database...
> So I suppose this is something wrong with Domino 7.0.1 server
> configuration...
>
> What can be problem?
>
> On Aug 29, 3:10*am, Martin Humpolec wrote:
> > On Aug 28, 9:54*pm, vpalko...@gmail.com wrote:
> >
> > I expect the signer of the agent has the right to change the ACL so
> > check the properties of the agent (second tab) if it is allowed to run
> > understricted operations (from version 7 is this setting in agent as
> > well)
>
>

Remote Debugging didn't show any errors...
Script finished correctly.

Again it updates ACL except "Max internet..." param... See sample
below. I suppose there is some setting on Domino server that prevents
InternetLevel to be changed. What do you think?

Set acl = Database.ACL
Call acl.AddRole( "ROLE1" )
Call acl.Save

acl.InternetLevel = 2
Call acl.Save
Print acl.InternetLevel '2 seems the InternetLevel has been
updated but it hasn't when you check the ACL in Notes Client.




On Sep 4, 1:19*pm, Oravecz Laszlo wrote:
> Hi!
>
> And how about Remote Debugging?
> The script finished correctly?
>

vpalko999-at-gmail.com wrote:
> Remote Debugging didn't show any errors...
> Script finished correctly.
>
> Again it updates ACL except "Max internet..." param... See sample
> below. I suppose there is some setting on Domino server that prevents
> InternetLevel to be changed. What do you think?

Is there a line "on error resume next" in your agent?

Again,

Call acl.AddRole( "TEMPROLE" )
acl.InternetLevel = 4
Call acl.Save

this code just adds new role but doesn't update InternetLevel if it's
being run on server.
If you run this code localy from the agents list it works fine.

So maybe there is some InternetLevel restrictions on Domino server to
change/update this specific option?
Who knows?

Thanks
Vlad

1. Agent runner should have the 'Manager' right on the database.
2. I just keep '1. Do not allow restricted operations' setting.
3. I make a schedule agent and signed with a person with manager right
of the database. This user have the 'Run unrestricted methods and
operations', 'Run restricted LotusScript/Java agents', and 'Run Simple
and Formula agents'.

The code sample is as below,
Dim sess As New NotesSession
Dim Database As NotesDatabase
Dim acl As NotesACL

Set Database=sess.CurrentDatabase
Set acl =Database.ACL

Print "ACL Internet Level is " & Cstr(acl.InternetLevel)
If acl.InternetLevel = 3 Then
acl.InternetLevel =4
Elseif acl.InternetLevel = 4 Then
acl.InternetLevel=3
End If

Call acl.Save

Print "ACL InternetLevel is now change to " & Cstr(acl.InternetLevel)

Exit Sub

After execution, I can find the setting is changed at the database ACL
property box.

In order to check for the problem, I will suggest you to enable the
debug mode of agent manager on server.

The command is, tell amgr debug *