Skip to main content


Error: "Operation Is Disallowed in this Session" Running Scheduled LotusScript Agent

 Technote (FAQ)
 
 
Question
A Scheduled LotusScript agent generates the following error message on the Domino Server console:
"<date time> AMgr: Agent ('<agent name>' in '<filename>' error message: Operation is disallowed in this session".

The server console also indicates that the agent ran successfully but in fact the agent did not execute all of the code within the agent. The agent in this case makes use of an unrestricted LotusScript call Dir. The signer of the agent is listed under the "Run Unrestricted Methods and Operations" option in the server's Server document (under the Security, Programmability Restrictions area).

The same agent can be triggered manually without issue.
 
Answer
In Notes/Domino 6.0 and above additional functionality was added to the Agent Properties which allows a variety of security options, one of which controls the agent's ability to execute restricted operations. These properties are found on the Security (Key) tab of the Agent Properties. The "Set Runtime Security Level" property defaults to a value which does not allow agents to access restricted operations. In order to execute restricted operations the property would have to be set to "Allow Restricted Operations".
Details on the Property Settings

There are three levels available:

1. Do not allow restricted operations (Default)
2. Allow restricted operations
3. Allow restricted operations with full administration rights

Description of these values:

Do not allow restricted operations
The agent is not allowed to perform restricted operations. Note that this is the most secure choice. The reason the agent cannot perform restricted operations is that the agent has rights that are restricted.

Allow restricted operations
The agent can perform restricted operations because it is has been granted unrestricted rights. Note that this is a less secure choice than the previous one and grants the agent more power.

Allow restricted operations with full administration rights
The agent can perform restricted operations and can do so with full administration rights. This choice grants even more power to the agent because the agent now has been granted unrestricted rights and given full administration rights. Use this choice with caution.


The "Set Runtime Security Level" property setting is saved as a numerical value in the $Restricted field of the agent. The values of the $Restricted fields correspond as follows:

Do not allow restricted operations = 1
Allow restricted operations = 0
Allow restricted operations with full administration Rights = 2


Supporting Information:
Some of the other new properties introduced in Notes Domino 6.0 which are also found on the Agent Properties Security tab:

- Run on behalf of
- Allow remote debugging
- Allow user activation
- Default access for viewing and running
 
Related information
LotusScript Agents that Require User's Name in "Run Unr
 
 
 

Copyright and trademark information

IBM, the IBM logo and ibm.com are trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at www.ibm.com/legal/copytrade.shtml.

Rate this page

Please take a moment to complete this form to help us better serve you.

This material provides me with the information I need.






This material is clear and easy to understand.






Did the information help you to achieve your goal?

What updates, improvements, or related information would you like to see in this document?

Your response will be used to improve our document content. Requests for assistance, if applicable, should be submitted through your normal support channel as we cannot respond from this site.

Input the verification number to submit feedback:


Close [x]

Maintenance Window

  • The IBM Technical support pages, including the Downloads and Drivers Finders will be temporarily unavailable for up to 4 hours due to planned maintenance. This will take place between Saturday November 14, 2009 9:00 PM ET and Sunday, November 15, 2009 7:00 AM ET. During the maintenance, you will not be able to search or download from these pages.

Close [x]

Unscheduled Maintenance Window

There is no unscheduled maintenance scheduled at this time.

Document information

Product categories:

Software

Messaging Applications

Advanced Messaging

Lotus Domino

Lotus Domino Designer

Operating system(s):

AIX, HP-UX, Linux, Solaris, Windows, i5/OS, z/OS

Software version:

6.0, 6.5

Reference #:

1106729

IBM Group:

Software Group

Modified date:

2004-07-29

Translate my page

Rate this page

Availability Notices