Lotus Notes Agent running with the user desired

A rather complex story... I have some questions:
- it's a SOAP web service, correct?
- why do you say that "[it] is run on server because only server has right to call webservice" ? why is that ?
- how did you come to the conclusion that you need three agents ? and not two, or one, or none at all ?
- parent document ? parent form ?? forms have no parents... what is the child document then?
- how come that "someone in the company that do not have right to see the parent document" actually can trigger the first agent ? can it not be prevented ?
- or why do you need it ?

Normally, an agent runs with the privileges of the person who signed the agent. If you sign the agent using the server's id, and the server has Manager rights in the database, it can do everything on the condition that the document is readable to the server. If Reader fields are used, the server should be granted access to the document using a role or so. Otherwise, not even the server can see the document.

Can you give some (very reduced) sample codes of the three agents? So that we can understand what you intend to accomplish? Thank you.

Hi some brief answers are below;

-it is a soap service yes,

-all the employees of the company can make requests from the form and company has policy to allow some ips and not all of them so, when it comes to why i really dont know as well but i know that client can not trigger the web service but the server

-at first i made 2 agents first one gets the field values on the form and second makes the ws call but i got  the error below
"Cannot create automation object" error is received.
so i made one more agent in the middle to prevent that and the error is gone

-in the parent document process starts if it is a for example authorization transfer process than from main document a subdocument is created after the click ,then if this form is approved it will do the operation, but the subform do not have all the fields i need so i need to reach to the parent document and get the required fields.

- this is a authorization transfer request and i have a case where the manager can assign the form to someone else in the company but it might happen that this person can not see the main form but it sees just the subform and if he accepts the authorization then he will get it but he does not have to see who created the parent document, who approved it etc....

i signed the agent but it does not work with my priviliges. if i do the approval then it works fine but if someone else it does not work do definetly that other person is not running it with my rights.
I will give u the codes when i go to company..thx

Still, can you explain why you use agents, and not LotusScript in a view action or in a button on the form? Instead of:

:
your script
:
Call agent.RunOnServer()
:
your script continues
:

Ok actually the mainly the forms trigger the ws from action buttons on them or after an approval the logic needs to trigger the webservice.

There are 3 operations , new ,renew and revoke and those 3 operations are being triggered in 36 places different places on the forms. so I thought making a script library that calls and handles the web service and buttons that are on the form already have a lot of operations and they already do somethings so adding code over there did not seem much logical and I did not know if it was possible to call script library operations from the forms' action buttons so there comes the agents..

I only made the trigger part from the action buttons on the form and it calls an agent and agent calls a run on server agent (to prevent the error ==>"Cannot create automation object" error is received. ) so this run on server agent calls the last client side agent which call s the web service and gets the results and saves to a document which will be accessed by the prior agent and will know the result and notify the user accordingly..
1st agent which is client side gets the data on the form saves It to a temp doc and calls the second agent second agent just accesses that temp document and calls the 3rd agent and 3rd agent calls the script library operations( new,renew,revoke)

so this architecture is not logical? the programmer before me did it this way so I did not want to risk and try something new but get this working asap , so I just tried to do exactly the same he did and take no risks..

but what would you recoomend what is wrong here? actually codes on action buttons are already very long and some of them are formula and some are lotusscript so there is really too much to add and the code will be the same so a centralized function type structure was anyways required which would be the script library.. is that the wrong way?

> ... and take no risks.
No guts, no glory... ;-)

Of course, generally speaking, it would be best if you kept everything in one Script library. I can understand you need RunOnServer to avoid the error (actually, what special object is used, OLE or COM?). I can even understand that you need another agent, in order to start LotusScript from formula language. I suppose the problems begin with the 3rd agent, since it isn't running (apparently) with the current user's credentials. I'd have tried to write everything in LotusScript, thus avoiding agents and context changes. But it's your kitchen and I can't see what's in the pans.

Could you give an example, i.e. where those 3 agents are used?

By the way, did you ask an Admin to sign the agents with the server's id?
Do you have a development/test environment (server) where you have all the rights?

Actually the application is nnot a new one it has been around about 7-8 years in the company and many developers worked in the application put something in their way of doing things then left the company so it is basicly hard to see what it is doing type of application and if i count the whys in the application i would never get this done so instead i just determined where those integration points will occur and to integrate 2 different systems i made a centralized agent that;s called from any where regardless of formula or lotusscript is used.But i agree with you to avoid agents and context differences and write less and clear code i wish they built the application with just one language of lotusscript or java.

actually i use a LOG library i dont know what is causing the error of create automation error really so cant answer if OLE or COM but i just get the values of the fields on the form and pass it two the second agent i just used lotusscript classes and functions and nothing special really so cant address this issue.

I am working with the development environment and have the full right to server.so basically i sign the agents.

By the way i progressed alittle bit on the problem ...when some one that donot have right to see the main form instead of below code (pDoc=parent document) i call another agent (server side) and i pass the current document note id with the tempdoc and server side agent makes a look up with db.Search if a parent document exists of this sub document and if it exists gets the fields with the agent. But now

Dim pDoc As NotesDocument
Set pDoc=db.Getdocumentbyunid(curDoc.Parentdocumentunid)

Heh... Maybe you need yet another agent, see this page: http://www-10.lotus.com/ldd/46dom.nsf/DateAllFlatweb/0702fdcd7c611c1f85256dc60036457c?OpenDocument

yes thanks that is helpful I think as they say it is a bug. But what is amazing to me is that although i put someone else in the "run on behalf of" field and i include that person in the servers document and it does not work with the that person's credentials but whoever make the click on the action button ...do you know if that is the case or what is wrong here?

Thank you and sorry for late