PortalBookmarkRole Missing

Sort:
You are not authorized to post a reply.
Author
Messages
Ellen Melton
Advanced Member
Posts: 28
Advanced Member
    In the Lawson Administration Resources and Security Guide (page 242), one of the Lawson-delievered roles listed is PortalBookmarkRole. In our installation, that role was not delivered; instead, we have a PortalBookmarkAdminRole. In a recent LIS inquiry to Lawson about this, they said the guide was a typo.

    I was wondering if any other installations actually had the PortalBookmarkRole delivered.

    What concerns me is the "Admin" piece of the role title we have. I want to make sure the role doesn't give the enduser more access than what they need. Lawson couldn't answer that question for me.
    John Henley
    Senior Member
    Posts: 3348
    Senior Member
      Hi Ellen,
      I have also noticed that role to be missing, and have just created it. It needs access to LOGAN, LO system code, LO15.1, LOBKMARK, and LOUSRBKOPT.
      Thanks for using the LawsonGuru.com forums!
      John
      Ellen Melton
      Advanced Member
      Posts: 28
      Advanced Member
        So does the delivered, PortalBookmarkAdminRole (which is not documented as delivered), come with more access than what you created? Based on what LIS told me, the manual was a typo on this and it should have been documented as "PortalBookmarkAdminRole" all along - as the delivered role.
        John Henley
        Senior Member
        Posts: 3348
        Senior Member
          The delivered role, PortalBookmarkAdminRole, grants access to more tables and forms in LOGAN. Using the PortalBookmarkAdminRole probably is 90% safe, but for average end users not using Design Studio, and not administering anything, the additional tables and forms are not needed.
          Thanks for using the LawsonGuru.com forums!
          John
          Ellen Melton
          Advanced Member
          Posts: 28
          Advanced Member
            And just think - LIS told me there was no difference. So if I just create a PortalBookmarkRole with just the things you mentioned in the eariler post, than that is all the basic end user will need? And if I have someone, like a developer, that uses Design Studio, then they will need the AdminRole? or is it anyone that is a Portal Administrator? It would be nice if Lawson gave you a full listing of what each delivered role should have so that I could compare!!!
            John Henley
            Senior Member
            Posts: 3348
            Senior Member
              Design Studio developers can use the Admin role if you want. Or you can create an additional role for them that includes RD69 and the SIRDXMIDX table.

              The best way to see the Lawson-delivered roles is to assign them to yourself, and then run the User Security Report. It will show all the secured objects, and which role grants them.
              Thanks for using the LawsonGuru.com forums!
              John
              Ellen Melton
              Advanced Member
              Posts: 28
              Advanced Member
                Thanks for the feedback. I assigned the PortalBookmarkAdminRole to myself and ran the security report. Wouldn't you know it - no security rules - NOTHING. The PortalBookmark security class is the only thing assigned to the role and there are no security rules associated with the security class. What a mess. I'm assuming, that as delivered, there should have been rules already setup. Just one more thing that got messed up in our install. I'm sending this up to our PM to get some eyes on. Makes me wonder if the other delivered roles are OK. Who knows!!
                John Henley
                Senior Member
                Posts: 3348
                Senior Member
                  When you ran the security report, make sure you selected the correct profile (LGN) on the left hand-side...
                  Thanks for using the LawsonGuru.com forums!
                  John
                  Ellen Melton
                  Advanced Member
                  Posts: 28
                  Advanced Member
                    I did. Just to be sure, I selected each profile individually. Here is what I got in my report for LGN profile

                    > User Security Summary:
                    Role Profile/Security Class Object Info Rule
                    PortalBookmarkAdminRole LGN/PortalBookmark none
                    You are not authorized to post a reply.