Beginning with HCL Nomad Web 1.0.4, MarvelClient has Restrict functionality available for the Nomad Web platform.
This allows you to prevent Nomad Web users from accessing, replicating, or deleting specific databases either locally or on a server. The most common use-case is if you have databases on your server that you don't want Nomad Web users to open (maybe because they use Java or clientside XPages), you can easily prevent them from being used by Nomad Web users with a simple MarvelClient action.
Requirements
- HCL Nomad Web 1.0.4 or higher
- MarvelClient Config Template version 20220701145300 or higher
- An active MarvelClient license that includes Realtime functionality
Before You Get Started
If you have an older version of the Config template, you can run Online Update to get the latest version that has been assigned to your account. If the template still isn't new enough, active licensed users can contact panagenda support.
Creating a Restrict Action
You can create a new Restrict action by going to any of the Actions views in the Config DB and choosing the drop-down menu item Nomad – Nomad Restrict:
On the action form you can choose the following things:
| Restriction Type (choose one or more) | |
|---|---|
| Database Access | Prevents users from opening a specific database, either directly in the client or programmatically from another database |
| Database Creation | Prevents users from creating a new database on a specific server (or local) or in a specific folder |
| Database Deletion | Prevents users from deleting specific databases |
| Filter Type (choose only one) | |
|---|---|
| Disallow (=Blackist) | Users will be allowed to access/create/delete all databases EXCEPT the ones specified below |
| Allow (=Whitelist) | Users will be allowed to access/create/delete ONLY the databases specified below |
| Database Specification (choose one or more, multiple selections are ANDed together) | |
|---|---|
| Server | REQUIRED: enter a specific server name, or a match based on wildcards or regular expressions. An empty server name means local databases. |
| Directory | OPTIONAL: enter a specific directory name, or a match based on wildcards or regular expressions. Use / as a path separator. |
| Filename | OPTIONAL: enter a specific database filename, or a match based on wildcards or regular expressions. |
Like all MarvelClient actions, you can also use the "Who" tab to specify which users the restriction applies to.
Example Action
Here's an example action that would prevent access to all databases in the "foo" directory on any server in the /panagenda org:
