Skip to Main Content
HCL Domino Ideas Portal

Welcome to the #dominoforever Product Ideas Forum! The place where you can submit product ideas and enhancement request. We encourage you to participate by voting on, commenting on, and creating new ideas. All new ideas will be evaluated by HCL Product Management & Engineering teams, and the next steps will be communicated. While not all submitted ideas will be executed upon, community feedback will play a key role in influencing which ideas are and when they will be implemented.

For more information and upcoming events around #dominoforever, please visit our Destination Domino Page

ADD A NEW IDEA

My ideas: Security

Showing 110

Option to select whether the LTPAToken should be completely removed/or usable when session has been completely ended.

When enabling Session authentication across servers, the token issued by a server can still be used even after the session has been completely ended on the server and on the browser. If a user issues a request to the server using the same token, y...
almost 2 years ago in Domino / Security 1 Under Consideration

Tool to remove the internet certificate from the server ID

The "Delete from ID file" action from the User Security (in Notes) or ID Properties (in Admin client > Configuration tab) is greyed out when trying to remove an internet certificate from the server ID. We would like to request a tool that will ...
almost 2 years ago in Domino / Security 0 Under Consideration

Restrict users from viewing person and server configurations in Domino Directory

Currently all users (with reader access) are able to access Person document > Basics/ Work/ Other/ Misc/ Certificates/ Roaming/ Administration tab. Can we restrict the users to only access to Basics tab for security best practice?By right, user...
about 2 years ago in Domino / Security 1 Under Consideration

Turn off responding on / api

If I haven't turned on Data Services in Domino this endpoint should on respond at all. It's an unnecessary security risk to keep it open if not used, common practice is to have endpoints closed if they are not used. Also to be able to enable it fo...
over 2 years ago in Domino / Security 0 Under Consideration

iNotes : "Prevent Copying" is enabled and it allowing copying of contents from the emails.

When we are comparing the "Prevent Copying" behaviour between notes client and iNotes. In Notes Client prevent Copying is working as expected. User is not able to reply, forward, copy the content of the emails but can only edit and save. But in iN...
over 3 years ago in Domino / Security 1 Under Consideration

Option to remove all X-Notes-Item headers from calendar meeting invitation

While the option "Internet Mail server sends Notes private items in messages" is set to disabled and notes ini parameter  $CSRemoveIcalNameHeaders=1 is set on both Notes Client and Domino Server only the Name headers are removed. It does NOT rem...
almost 5 years ago in Domino / Security 0 Under Consideration

Restrict mails that doesn't have Person Document

We want to restrict SMTP outgoing in such a way that the router should check whether the person document or mail in document exists in Domino Directory and it should send only when these exists. (SMTP Outbound restrictions) with out any manual int...
almost 5 years ago in Domino / Security 0 Under Consideration

Increase the amount of Administrative trust defaults in security policy

When trying to set up SAML. On the security policy.Administrative Trust Defaults - Update Links - appears the Error Message :Field is too large (32k) or View's column & selection formulas are too large. Issue being previously reported on exis...
about 5 years ago in Domino / Security 1 Under Consideration

Is there a manner to change the behaviour to have field "No access" prority upon "access" field?

In the server document, in the "Access server" field we have added a group named LocalDomainUsers that contains : */OU/Org*/OU2/OrgGroupname We also have in the server document, in the field "Not access server", the group "NO ACCESS" that contain...
over 5 years ago in Domino / Security 2 Under Consideration

prevent using web browser to change mail file owner

Customer found users could use web browser embedded developer tool to directly change the mail file owner manually in iNotes, you may find the related settting in HTML page. this could cause users to send forged sender email to others. We alrea...
over 5 years ago in Domino / Security 0 Under Consideration