PrevPrev Go to previous topic
NextNext Go to next topic
Last Post 06/06/2016 3:34 PM by  LKEN2002
Company Level Security
 12 Replies
Sort:
You are not authorized to post a reply.
Author Messages
Jay Riddle
Veteran Member
(493 points)
Veteran Member
Posts:191


Send Message:

--
03/18/2010 4:04 PM

    Using the new Lawson security is there a quick way to setup company level security so only certain users can see a company? 

    MattM
    Private
    Private
    Veteran Member
    (214 points)
    Veteran Member
    Posts:82


    Send Message:

    --
    03/18/2010 7:17 PM
    Create an element rule on COMPANY that states if COMPANY=="company number" then no access else all access and apply it to whichever roles you dont want to have that company.
    John Henley
    Private
    Private
    Senior Member
    (9563 points)
    Senior Member
    Posts:3205


    Send Message:

    --
    03/18/2010 7:44 PM
    There is a new user attribute in RM called "CompanyControl" (I think that's the name) you can use to avoid hard-coding. =
    Thanks for using the LawsonGuru.com forums!
    John
    Jay Riddle
    Veteran Member
    (493 points)
    Veteran Member
    Posts:191


    Send Message:

    --
    03/19/2010 9:50 AM
    We are on 9.0.0.4 so I think we do not have the CompanyControl attribute. Also even with an element rule wouldn't we need to go through every form and add in isElementAccesible(....)??? Going through every form on every security class is what I would like to avoid if possible.
    MattM
    Private
    Private
    Veteran Member
    (214 points)
    Veteran Member
    Posts:82


    Send Message:

    --
    03/19/2010 10:05 AM
    The company and process level elements are different, they use the 700/900 security that LAUA used when defining data level security. If you create a rule on company and assign that security class to a users role, the effect is global. If you wrote an element rule on employee or such, you would have to write the isElement... rule on each token. If you use ESS, be careful of the impacts to a users access to the company they exist in. Hope this helps.
    StacyR
    Programmer
    Blue Cross of Idaho
    (9 points)
    Posts:5


    Send Message:

    --
    03/19/2010 12:37 PM

    MattM - 

    Would you add this to an element or element group?

    Jay Riddle
    Veteran Member
    (493 points)
    Veteran Member
    Posts:191


    Send Message:

    --
    03/23/2010 1:08 PM
    We tried both a element and an element group rule and it didn't seem to deny access. Is the rule on a specific type of element group?

    On a related note: We do not have any employees in the company we are attempting to lock down so we I wouldn't think we will run into ESS/MSS issues.
    Mark F. Hardy
    Sr Application Developer
    Bluegreen Corporation
    Veteran Member
    (124 points)
    Veteran Member
    Posts:44


    Send Message:

    --
    03/23/2015 4:36 PM
    I did as you said in your post of 03/18/2010 7:44 PM.
    No luck. Anything else needs to be done? Thanks!
    Mark F. Hardy
    Sr Application Developer
    Bluegreen Corporation
    Veteran Member
    (124 points)
    Veteran Member
    Posts:44


    Send Message:

    --
    03/23/2015 4:36 PM
    This last post was for John Henley. Thanks.
    Jimmy Chiu
    System Analyst
    Federal Government
    Veteran Member
    (1858 points)
    Veteran Member
    Posts:632


    Send Message:

    --
    03/24/2015 8:03 AM
    Add Files to a new secClass
    Add COMPANY element to the new secClass
    Add secClass to role
    Assign role to user

    if(user.attributeContains('CompanyControl',lztrim(COMPANY)))
    'ALL_ACCESS,'
    else
    'NO_ACCESS,'

    Add value of the company(s) in user RM "CompanyControl" that they should have access to.

    If they can still access everything, you have another rule overriding the company element.
    Mark F. Hardy
    Sr Application Developer
    Bluegreen Corporation
    Veteran Member
    (124 points)
    Veteran Member
    Posts:44


    Send Message:

    --
    04/06/2015 12:30 PM
    I just saw this post.  I think I understand what you are saying.  I'll give it a go.  Update to follow.
    Greg Moeller
    Private
    Private
    Veteran Member
    (3873 points)
    Veteran Member
    Posts:1377


    Send Message:

    --
    04/09/2015 5:10 PM
    Be careful setting this up for ESS access. I believe that there is the entry in AC00.1 under the 'Security' field. I've heard that you also need these set up in your company control attributes to have ESS work correctly... Not sure why.
    LKEN2002
    Private
    Sutherland Global
    New Member
    (7 points)
    New Member
    Posts:3


    Send Message:

    --
    06/06/2016 3:34 PM
    I saw this post while trying to do the same thing. I have to secure a company and I tried the group and element and it hasn't secured it. Not sure what else I am missing. Any help would be appreciated.

     

    Update:  tried it again with just element this time and it works!!

    You are not authorized to post a reply.