I got a BIG problem with the

High Performance Queries on view where there is

security on the records. User can't see his

data !!!!!!!

Example:

There are 10 records in a database.

A user has rights to see only 3 records.

He does his data entry and goes to print

a report in VIP. The report is doing

a High Performance Query against a view.

VIP returns a message saying no records found.

When i take High Performance off the user now

sees all his records.

Help!!!!! I can't explain this and I need

an answer today or I'm gonna be fired !!!

Please get back to me today ….

Dennis Cernosia

Brown Brothers Harriman & Co.

(201) 418-6256

E-MAil: ShaneSlatr@aol.com

Dennis,

(copy of your question)

Some comments first.

1) ViP does not exercise any security restrictions in a query. There are a number of Notes "restrictions" that only Notes itself enforces, and then only in its own UI displays. In fact then, ViP may often retrieve data that a user cannot see through Notes itself. However, if the security is enforced by Notes, then it just doesn't include the data in a query.

2) Setting "High Performance" does not change the query in any way. The only thing it does is to give an error back if you formulate the query "illegally", that is, it is not a H.P. query. I strongly suggest that you set up a simple app that simply queries the view with exactly the same criteria that the report would want. Don't set High Performance. See what rows are returned. If the correct data is returned, then go back to design and set High Performance. If you get an error when you run it, then it is not a correct H.P. query. If you still get the same data, then you should be able to report on it successfully.

You don't say what your report is asking for (bands, calculated columns, etc.). You'll have to give more detail if you can successfully get the data object to retrieve the data rows.

John,

I did what you said - i created a simple VIP app

that had two data objects in it. One was set to

High Performance and the other wasn't.

I ran this VIP program on a users PC that

DID NOT have full access to all the data,

just a small subset courtesy of a readers

name field.

When they did the query on the High Performance

data object, no records were found.

When they did a query on the non-High performance

data object, it found records.

YET, when I did the query (I have access to all

records) I was able to see everything with the

High Performance Query. What gives here?

I'm very confused - I have over 150 people using

this program and I am quickly getting a bad

headache over the thought that no one can run

their reports.

We are using ViP 1.1 on a Notes 4.5 database.

Dennis Cernosia

Brown Brothers Harriman & Co.

(201) 418-6256

E-mail: ShaneSlatr@aol.com

1) Are you absolutely sure that the two data objects are identical except for the Option "High Performance Query Warnings" being checked on the Options page of the data object? There is really no way that the queries can return different results, unless one returns an error message about H.P. queries.

2) Do you have any criteria on the queries?

3) Can your PC user go in through Notes (instead of ViP) and see the view and data you you are querying?

4) I presume that your 4.5 database is on a server, and that it is a 32-bit Notes Domino installation. Your ViP 1.1 apps are 16-bit, and therefore all your local Notes clients must be 16-bit Notes installations. Sometimes there are some problems with 16-bit Notes accessing a 32-bit server/database, either because of network problems or because of Notes itself.

John,

The two data-objects are indeed identical, the only

difference is the High-Performance option.

And, i am using the same criteria on both data objects when

setting the query criteria.

Our Vip 1.1 users are updating and reading data

on the Notes 4.5 server with no problem. It's

simply when they go to the reporting function

with it's High Performance Query option that they're

having a problem. When I do it I have no problem,

because I have access to everything.

I also had the user go into Notes and open the view

to see the data - no problem, they can see it. It's a

hidden view but we were able to see it by doing that

CTRL-SHiFT-GoTo feature in Notes 4.5 ……

Help! My manager is gonna shoot me if i

don't get this working !

Dennis Cernosia

Brown Brothers Harriman & Co.

(201) 418-6256

E-mail: ShaneSlatr@aol.com

There is no High Performance option on a Report.

That is what is confusing me. You can only put

H.P. option on a query, not a report.

Also, exactly what is the criterion you are applying.

What are the column datatypes referenced in the query. Are they categorized/sorted, and

what is the criterion. More to the point, what are

the details on the report? That sounds like where

your problem is.

The view I'm looking at has the first column

categorized.

I set the query in VIP to look for a specific

department code.

I can see the data in the data-object under my

Notes ID. My user who sees a limited subset of

the records should be able to see this data but

can't.

I'm testing the same one module test app on my

PC and my users and I'm confused why there

should be different results.

Dennis Cernosia

Brown Brothers Harriman & Co.

(201) 418-6256

E-mail: ShaneSlatr@aol.com

Is your data in a Main/Response heirarchy? If so,

be aware that responses will not be shown in ViP if the

Main document is not returned. If your user is

being denied access to the Main, then no responses

to that row will be seen either.

By the way, when I asked for details on the query,

I wanted the datatype of the column and an example

of the criterion as well. In addition, for a

categorized column, are there multi-values of the

category appearing? That is, can there be two

category values for the same document?

The data type in the column is text, there are no

response documents in this database, and it is

not a multi-valued field. The column is sort and

categorized.

In my simple test app, I have one button

with the following code:

Quote=Chr(34) ' =double quote

Status%=Data1.CellSetQuery(1,1, Quote & "010-050" & Quote)

Status%=Data1.ExecuteQuery()

End

When I run it, I see all the data. However,

my users can't. I checked the readers name

field in the record - my name and the users

name is in the field. Like I said, the only

difference between us is that I can see all

the records - they can see only a subset of those

records.

Dennis Cernosia - (201)418-6256

Brown Brothers Harriman & Co.

E-Mail: ShaneSlatr@aol.com

Dennis,

I'm stumped at this point. If you are literally running

the same ViP app on your and another user machine, and

accessing the same server and database, then

any differences in the returned data has to be a Notes

database issue. ViP simply does not have any way to

to change this behavior.

My suggestion is to look carefully at the database.

There are a number of different security issues that

can be preventing users from seeing data. For example,

if "Roles" are set up, then that may be restricting access.

I'm pretty sure at this point that the problem is a reader 

security being enforced by Notes.

You haven't mentioned any "High Performance" issue

recently. I hope this is eliminated from being the

fundamental problem.

John,

Well, another day was wasted testing this

high performance query. We came up with the

following discovery:

When the users ran that simple VIP app, instead

of hitting the button that formats the criteria

and then does the ExecuteQuery command, we had them

hit the Execute icon on the data object. When

they did this they saw data !!!!!!!!!!!!!!!!!!!

However, when they wanted to select a certain

department specifically (using the CellSetQuery

command) they saw nothing !!! It returns no

records where a minute ago they saw everything !!

I know the Query command was set up correctly

because when I do it under my ID it works !!!

This is stupid - when the user does a straight

ExecuteQuery they see data. When they try to

select something specifically they see nothing !!

There is something seriously screwy with this

CellSetQuery command on a high performance view

with security.

I think I need to talk to voice at this point.

Please give me a call tomorrow.

Dennis Cernosia (201) 418-6256

Brown Brothers Harriman & Co.

E-mail: ShaneSlatr@aol.com

Just a wrapup for anyone following this thread.

After TeleCom on this, the solution was to change the view so that first column is SORTED only, not Categorized.

The clue was that when a limited user logon looks for column type in the view, it is typed UNKNOWN rather than text (meaning that no data could be retrieved for the view.)

There is some interaction between the Notes security and ViP that is causing this, but I don't know the real answer. Anyway, not categorizing solved the problem.

View this thread on the forum...