PrevPrev Go to previous topic
NextNext Go to next topic
Last Post 10/6/2011 2:01 PM by  Roger French
securing drill around and select
 1 Replies
Sort:
You are not authorized to post a reply.
Author Messages
Sheila Kendall
Advanced Member
(55 points)
Advanced Member
Posts:29


Send Message:

--
10/6/2011 1:37 PM
    I saw a tip about securing access to only the employee's data, but I'm not getting it correct.  (Below is the code I am looking at).

    I want to limit the employee to only be able to drill around / selects only on his own data.

    1.  I thought that I needed to put this on the employee table,  then I tried the employee field itself - Still no luck.  The employee can select anyone and drill around on anyone.
    2.  in the object - user   what is in getEmployeeID?   Is that the employee number and if so,  where does it get that data?

    EMPLOYEE / PAEMPLOYEE

    Employee can see themselves & those underneath them:

    (

    (lztrim(user.getCompany())==lztrim(table.COMPANY))&&(lztrim(user.getEmployeeId())==lztrim(table.EMPLOYEE))

    ||

    (user.isSupervisorOfEmpInHR(lztrim(table.COMPANY),lztrim(table.EMPLOYEE)))

    )

    DEPBEN / EMDEPEND / HRDEPBEN

    Employee can see themselves but not those underneath them (in other words, an employee's dependent information is not available to their supervisor)

    (lztrim(user.getCompany())==lztrim(table.COMPANY)) && (lztrim(user.getEmployeeId())==lztrim(table.EMPLOYEE))


    Roger French
    Private
    Private
    Veteran Member
    (1304 points)
    Veteran Member
    Posts:542


    Send Message:

    --
    10/6/2011 2:01 PM
    user.getCompany and user.getEmployee come from the user's identities. If you use these functions, then users must have the values for these identities. These identities are normally used for self-service applications.

    The security manual will explain in much more detail what identities are and how to populate them.
    You are not authorized to post a reply.