Home
HCL Domino Designer Basic User Guide and Reference
This guide provides information on using HCL Domino Designer and programming language reference information.
Application Management
Welcome to the Application Management section of Domino® Designer Help.
Security in an application
Domino® offers a multi-layered approach to security. Server administrators can secure databases, servers, and domains. Database designers and managers control the following:
The database access control list
Security overview for Web applications
Application access for Web users
The Advanced section of the ACL lets you specify a maximum access setting for Internet users who are authenticated with Basic authentication (that is, name and password, and also with Sessions-based authentication for HTTP only). You can limit access to what you specify as the "Maximum Internet name & password access." The "Maximum Internet name & password access" field does NOT apply to Internet users authenticated using Secure Socket Layer (SSL) Client certificates. These users have the full access granted to them in the ACL.

HCL Domino Designer Basic User Guide and Reference
This guide provides information on using HCL Domino Designer and programming language reference information.
- What's new in HCL Domino Designer 12?
  The following features are new for developers in HCL Domino® Designer 12.
- Accessibility and keyboard shortcuts
  Accessibility features assist users who have a disability, such as restricted mobility or limited vision, to use information technology content successfully.
- Application Design
  Welcome to the Application Design section of Domino® Designer Help.
- Application Management
  Welcome to the Application Management section of Domino® Designer Help.
  - Security in an application
    Domino® offers a multi-layered approach to security. Server administrators can secure databases, servers, and domains. Database designers and managers control the following:
    - The database access control list
      - Setting up a database ACL
      - Access levels in the ACL
      - Access level privileges in the ACL
      - Roles in the ACL
      - Editing the database ACL
      - Default ACL entries
      - Acceptable entries in the ACL
      - User types in the ACL
      - Enforcing a consistent access control list
      - Displaying the ACL history
      - To display a name's effective access
      - Security overview for Web applications
        Application access for Web users
        The Advanced section of the ACL lets you specify a maximum access setting for Internet users who are authenticated with Basic authentication (that is, name and password, and also with Sessions-based authentication for HTTP only). You can limit access to what you specify as the "Maximum Internet name & password access." The "Maximum Internet name & password access" field does NOT apply to Internet users authenticated using Secure Socket Layer (SSL) Client certificates. These users have the full access granted to them in the ACL.
        Enforcing encrypted Web transactions using SSL
        Maximum Internet name-and-password access
        Examples of ACL settings for a Web database
        These are examples of ACL settings to use if you design an application for Web users.
    - Application design element security
      An application developer can restrict access to design elements within an application. Application design security takes effect when users gain access to an application.
    - Notes® and Domino® encryption
      Encryption is a digital security mechanism that protects data from unauthorized access. Encryption protects data from unauthorized access. Using Notes® and Domino®, you can encrypt:
  - Completing an application and managing design changes
    As you prepare to deploy an application, consider these finishing touches:
  - Deploying an application
    The tasks involved with application design, database design, database management, and DominoTMsystem administration may overlap, depending on the size of your organization and the structure of job responsibilities. In some organizations, an application developer may be responsible for both application and database design, while in others, a database manager may handle all database design and management tasks. In addition, database management overlaps with Domino® system administration.
  - Procedure for optimizing and troubleshooting databases
- Domino® Query Language
  Domino® Query Language (DQL) is a facility running on a Domino server that provides a terse, shorthand syntax for finding documents. It supports a wide variety and complexity of search terms. It leverages existing design elements, avoiding the need to write detailed code to access them. DQL consolidates all methods in Domino for searching document contents.
- Composite Applications - Design and Management
  Composite applications are a key element in a service-oriented architecture (SOA) and contextual collaboration strategy. The ability to create and edit composite applications lets you easily integrate different types of components and technologies.
- DB2® Access views
  Domino® Designer includes two types of design elements to assist you in managing data contained in DB2® enabled Notes® databases:
- Programming Overview and User Interface
  This section contains general guidelines and examples that show where to use Java, LotusScript, and the formula language.
- Formula Language
  This section documents the formula language.
- LotusScript® Language
  Welcome to the LotusScript® Language section of Domino® Designer Help.
- LotusScript/COM/OLE Classes
- Java/CORBA Classes
  This section documents the Java/CORBA classes.
- Connectors
  Connectors provide native access to a wide variety of DBMS products, ODBC, the platform File system, Enterprise Resource Planning systems, and Transaction Processing systems.
- Javadoc™ for Domino® Designer related APIs
  As part of providing additional Java™ reference documentation, Domino® Designer ships with a help plugin that contains Javadoc™ for additional Domino Designer related APIs.

Application access for Web users

The Advanced section of the ACL lets you specify a maximum access setting for Internet users who are authenticated with Basic authentication (that is, name and password, and also with Sessions-based authentication for HTTP only). You can limit access to what you specify as the "Maximum Internet name & password access." The "Maximum Internet name & password access" field does NOT apply to Internet users authenticated using Secure Socket Layer (SSL) Client certificates. These users have the full access granted to them in the ACL.

For information on setting up SSL, see Enforcing encrypted Web transactions using SSL .

Using Java™ technologies, you can share code with and link to WebSphere® applications. Single Sign-On (SSO) -- a shared authentication service -- allows for further seamless integration between Domino® and WebSphere® applications. For information on Single Sign-On, see Administering the Domino® System.

For information on Single Sign-On, see Enabling single sign-on for Domino® and WebSphere® Servers if you have installed Domino® Administrator Help. Or, go to http://www.lotus.com/ldd/doc to download or view Domino® Administrator Help.

Default logout time period

You can specify a default logout time period to log the Web client off the server after a specified period of inactivity. This forces the cookie that Domino® uses to track the user session to expire. Automatically logging a user off the server prevents others from using the Web client to impersonate a user if the user leaves the workstation before logging off. If you enable session-based name-and-password authentication for a server, users can also append ?logout at the end of a URL to log off a session -- for example:

"http://acmeserver/sessions.nsf?logout."http://acmeserver/sessions.nsf?logout

You can also redirect the logout to a design element or URL using the &RedirectTo parameter. For example:

"Http://acmeserver/sessions.nsf?logout&redirectto=/logoutDB.nsf/logoutApp?Open"http://acmeserver/sessions.nsf?logout&redirectto=/logoutDB.nsf/logoutApp?OpenPage
Http://acmeserver/sessions.nsf?logout&redirectto=http://www.sales.com

You can build this expression into an application -- for example, using it in a button -- or type it in as a URL.