Securing based on Process Level

Shari, that can be done via LAUA data security...

Ok, I should have mentioned - we are using Lawson Security for all of our end users. The only users that use LAUA are Lawson Administrators (myself and one other person). Is there a relatively simple way to do this using Lawson Security (I've written conditional rules on other security issue...)?

You would need to write rules using the PROCLEVEL emp group. There are some examples of this (unfortunately there for AP not HR) in the 'Implementing Lawson Security' documentation...

Thanks, John. I took a look at the documentation and I can see that I need to hard-code a process level. I'm trying to think if there is any way I can make this dynamic...

Here is our situation...We have about 18 process levels (representing 18 different retirement communities). There are one or two employees that would need this security role to them per community. Ideally, I would like to write a rule that dynamically gives an employee has access to their own process level assigned on their HR11 record. Is that possible?

From reading the documentation - sounds like I would either need to create 18 different security classes and roles...or I'm thinking, would a custom attribute in their LS record work?

-Shari

You could use a custom attribute or write a rule on the element group that looks at the users process level in their employee record.

We ended up created a custom attribute using the RM Schema editor.  Because we use LDAP (ADAM) I couldn't even think of a way to look up someone's employee record based because LS sits outside of Lawson.  How would that even be done?  Just curious....Thanks.

-Shari

The process level for a user contained within their HR11 record is stored in the EMPLOYEE table and could be found using a getdbfield function if I understand what were trying to do.

you could go to the form, in this case hr11.1 and write a rule there that looked in the employee table at the proc_level and then compared it to what was on the form...or you could write a rule that said if user is then only grant access to the suggested Proc_level...we actually created the unique attribute and used the group element rule to accomplish the task...