Tja, es ist ein Feature! Toll!
Aus der KBASE (#141641 vom 19.02.2001):
Is It Possible to Restrict Certain Web Browser Users from Accessing the Domino Server?
Problem:
For Domino 4.5x, 4.6x, or 5.x, you can grant or deny Notes clients' access to the Domino server by including individual or group names in the Access Server or Not Access Server fields in the Server document of the Public Name & Address Book (NAB). However, Domino Web server feature sets ignore any server restrictions you may specify in the Server document. Is it possible to restrict access to the server to only specific Web browser users?
Solution:
This issue has been reported to Lotus Quality Engineering in the form of an enhancement request.
Currently, it is not possible to restrict access to the Web server by entering individual or group names in the server restrictions in the NAB. The Restrictions section of the Server document applies only to Notes client connections.
Unless you allow Anonymous access, a Web user must have a Person document in the NAB with an entry in the HTTP password field to gain access to the Domino server. Therefore, to deny access to Web users, either delete the Web user's Person document or delete the entry in the HTTP password field on their Person document. If you have many users to deny, consider writing an agent to automate the process of deleting the HTTP password.
Additionally, always use the Access Control List (ACL) of each database to restrict access to the database.
