Reconsider need for Editor access to change Forwarding address and Internet address

Currently to change a forwarding address and/or internet address in a person document, the id making the change needs Editor access.

We have come across two separate examples where we think Author access with the [Person Modifier] role would be more suitable.

One is Sailpoint Identity Manager product which needs to be able to modify the internet address for things like names changes.

Second one was Quest Migrator for Notes to Exchange which needs to be able to modify the forwarding address.

In each case, we created functional ids and initially gave them Author access with the [Person Modifier] role. We did this to constrain the access that these ids had to modify other documents in the Domino directory. In both cases, we had to change the access to Editor to allow these fields to be updated.

This level of access gives these ids the ability to modify all documents in the Domino directory which is way more access than what we would prefer. If these fields were changed to no longer need Editor access, then we can restrict access to just the Person document.