Who's On?

	Membership:
	Latest: Lauren Beeker
	Past 24 Hours: 0
	Prev. 24 Hours: 0
	Overall: 5222

	People Online:
	Visitors: 75
	Members: 0
	Total: 75

Name	Points
Greg Moeller	4184
David Williams	3349
Kat V	2984
Woozy	1973
Jimmy Chiu	1883
Kwane McNeal	1437
Ragu Raghavan	1377
Roger French	1315
mark.cook	1244
Chris Martin	825

Lawson 9.0 Security

4 Replies

0 Subscribed to this topic

18 Subscribed to this forum

Sort:

Author

Messages

Kate Liamero

Veteran Member

Posts: 70

4/26/2007 8:18 PM

I have 2 security classes assigned to a role in Lawson LSF 9.0 security.

One class only allows access to all AP20 tokens and denies all other AP forms.

The second class only allows access to MA64 tokens and denies all other MA forms.

Both classes assigned to a role and to a user.

When I login I can access all MA and AP forms.

If I go back into the classes and explicity DENY ALL MA forms including the MA64 in the AP CLASS and explicity deny ALL AP forms including the AP20 in MA class then security works. I can now only see AP20 and MA64

WHY do I have to explicity deny. I thought the default was DENY.

This will be a nightmare to setup and maintain. Most of our users will have more than one class.

John Henley

Posts: 3365

New Poster

Engaged Reader

Avid Reader

4/28/2007 2:11 PM

Hi Kate,
You are correct, in that this is not how it should be working. See if you perhaps have security turned on/off and or 'allow all' set for that product line. Also, do you have any 'role overrides' set up?