I have an agent which creates documents and populates readers and authors fields. Once the agent is done running, anyone with reader access to the database can access all of the documents, even if they are not in the readers field! Doing a ToolsRefreshAllDocuments fixes the problem, but I don't like this solution. I don't want anyone who is not listed as a reader to be able to view these documents at any time, instead of the current solution where they can see it between the time that document was created by the agent and the time the refresh is run.
Why is this like this and how can I fix it?
(Sorry I don't have more points to spare)