Office - InfoPath 2003 Form with Active Directory Permissions

Asked By rigsj

11-Jan-08 10:10 PM

Hi,

Please help an InfoPath Newbie with form permissions.  It is possible
to manage an InfoPath 2003 Form based on Active Directory groups?  In
other words, a user's AD account would need to be a member of group

I know I could use SharePoint to host this form and manage access to
it.  However, management does not want it on SharePoint because they
do not want users requesting access to this form when they are denied
but then presented with the SharePoint request access form.  So, I
think the form should be placed on our company's Intranet server.

I think using the company's Intranet site (Win2003 Server Standard
with IIS 6.0 with integrated authentication enabled) would be an
alternative solution.  I would prefer to not use NTFS permissions to
manage access to this file/form because we are going to retire that
server this summer and that becomes more ACLs to manage.  I'd prefer
the form manages who access it.  That way it could be placed on any
server.

Could I use the Roles functionality or something in the InfoPath
itself to limit access to the .xsn file?  I'm open to all ideas.
Please help.  (FYI...  I'm also just learning Jscript too.)

Thanks,
-Joe

11-Jan-08 10:10 PM

I am currently doing this with much success.  It is simple to set a
node to a value from AD but the form will need full trust permissions
requiring a certificate to be installed.  I think the 2007 version of
infopath may have an "Out of the Box" function for this but it is not
difficult.  There are many fields in AD that can be used.  I use names
and email addresses and may start integrating job titles soon.  I've
been using VBscript to perform the functions and setting values in the
form by referencing the nodes.  I do control access to the forms
functions by using user roles and it does work.  I don't have any
Jscript examples but only VB.  If you'd like more info let me know and
I can share some code.

11-Jan-08 10:50 AM

You can do this without full trust and without any coding via an AD Web
Service.
It allows you to identify the user, get their email, manager, and other AD
info, it also has a method to identify whether they are a member of a
particular group.

It comes bundled with the Database Accelerator or it can be standalone.

You can find out more at http://www.qdabra.com and there are tutorials on
its use on http://www.infopathdev.com.

--
Thanks

Clay Fox

Qdabra Software
http://www.qdabra.com

InfoPathDev.Com
The Largest InfoPath Forum in the World
http://www.infopathdev.com