PrevPrev Go to previous topic
NextNext Go to next topic
Last Post 11/25/2016 11:27 AM by  haddixst
LSA Allow users access to other's batch jobs by group
 4 Replies
Sort:
You are not authorized to post a reply.
Author Messages
haddixst
Developer
UC Health
Basic Member
(16 points)
Basic Member
Posts:8


Send Message:

--
11/17/2016 10:11 AM

    Hello, we are implementing LSA as part of our V10 upgrade.  We are having issues trying to allow users access to other user's batch jobs.  What we would like to do is to have for example a member of the payroll department have access to their own jobs, plus access to jobs of other members of the payroll department.  I'm guessing this would maybe be implemented using groups??  Any advice is appreciated.  Thanks

    mikefortuna
    business systems analyst
    NFI
    Basic Member
    (22 points)
    Basic Member
    Posts:12


    Send Message:

    --
    11/17/2016 2:07 PM
    Check out the Resources and Security Administration Guide LSRDAG_10.0.9.0_UWA.pdf from Infor, pages 210-211

    Example rule for Unix and IBM i
    In this example:

    A user who is a member of HRGROUP can access all jobs and reports of HRGROUP members.

    HRGROUP is a Group that you have created (or will create)

    "getHostServiceID" and "isMemberOf" are functions available with Expression Builder
    UserName==user.getHostServiceID()||isMemberOf('HRGROUP',UserName)&&user.isMemberOf('HRGROUP')'ALL_ACCESS,'else'NO_ACCESS,'


    Example rule for Windows
    In this example:

    A user who is a member of HRGROUP can access all jobs and reports of HRGROUP members.

    HRGROUP is a Group that you have created (or will create)

    "getHostServiceID" and "isMemberOf" are functions available with Expression Builder

    HRGROUP is a Group that you have created (or will create)

    "getHostServiceID" and "isMemberOf" are functions available with Expression Builder
    UserName==user.getHostServiceID()||isMemberOf('HRGROUP',getRMIdForEnvOSId(UserName)) &&user.isMemberOf('HRGROUP')'ALL_ACCESS,'else'NO_ACCESS,'

    K. Hopkins
    Lawson Sec Admin/Sr. BSA
    Private
    Basic Member
    (16 points)
    Basic Member
    Posts:6


    Send Message:

    --
    11/17/2016 2:24 PM
    We are just finishing up LAUA to LS9 migration. This is what I did. We add the group to users that have the need.

    Profile=GEN
    SecClass=AllGENAccess
    Elements= UserName
    Rule=
    If (user.getUserName()==UserName) then ALL_ACCESS
    ElseIf user.isMemberOf('LBIViewOtherUsersJobs') then ALL_ACCESS
    Else NO_ACCESS
    Karen Sheridan
    Private
    Private
    Veteran Member
    (325 points)
    Veteran Member
    Posts:123


    Send Message:

    --
    11/17/2016 2:39 PM
    We have been on LSA v10 for 2 years now and were on LSA v9 before that. We still do it the old fashioned way with usergrpdef from the command line.
    haddixst
    Developer
    UC Health
    Basic Member
    (16 points)
    Basic Member
    Posts:8


    Send Message:

    --
    11/25/2016 11:27 AM
    Thanks for the suggestions everybody.... very much appreciated!
    You are not authorized to post a reply.