Default ACL entries

A new database, by default, contains these entries in the ACL:

  • -Default-
  • Database creator user name
  • LocalDomainServers
  • OtherDomainServers

All of these entries, except for the database creator's user name, are group names. The -Default- group is the only group that is specific to a database and not related to a group in the Domino® Directory.

For more information on creating groups, see Domino® Administrator Help.

-Default-

Users and servers receive the access assigned to the -Default- group if they have not specifically been assigned another access level, either individually or as a member of a group, or from a wildcard entry. You cannot delete the -Default- group from an ACL. The default access for -Default- depends on the design of the database template and varies among the different templates.

The access level you assign to the -Default- group depends on how secure you want the database to be. Select No Access if you want a database available to a limited number of users. Select Author or Reader access to make a database available for general use. The User Type field for -Default- should be set to "unspecified."

Database creator user name

The database creator user name is the hierarchical user name of the person who created the database. The default access for the user who creates the database is Manager. Typically, this person retains Manager access or is granted Designer access to the database.

LocalDomainServers

The LocalDomainServers group lists the servers in the same domain as the server on which the database is stored. This group is created by default with every Domino® Directory. When you create a new database, the default access for the LocalDomainServers group is Manager. The group should have at least Designer access to allow replication of database design changes across the domain. The LocalDomainServers group is typically given higher access than the OtherDomainServers group.

OtherDomainServers

The OtherDomainServers group lists the servers outside the domain of the server on which the database is stored. This group is created by default with every Domino® Directory. When you create a new database, the default access for the OtherDomainServers group is No Access to prevent a database from replicating outside the local domain.