• Search Forums
    Advanced Search Topics Posts
Prev
Next
Forums Infor / Lawson Platforms S3 Security

LSF9 security by process level AND security location - is it possible

 1 Replies
 0 Subscribed to this topic
 16 Subscribed to this forum
Sort:
Author
Messages
RachelM
Basic Member Send Private Message
Posts: 27
Basic Member
10/22/2010 6:57 PM
We have been able to secure LSF9 using the element groups using either process-level or sec-location but not both; roughly what we're looking to do is ((process-level = 'X' and sec-location = 'Y') OR (process-level = 'Z')). Is that even possible using element groups? Thanks.
Jimmy Chiu
Veteran Member Send Private Message
Posts: 641
Veteran Member
10/25/2010 2:47 PM
Yes, use the builtin PROCLEVEL + HREMP element groups.

for example:

Define HREMP element group (SEC_LOCATION 9999999999 is open access by default):
if(lztrim(SEC_LEVEL)=='9'&&(lztrim(SEC_LOCATION)=='9999999999'||lztrim(SEC_LOCATION)=='X')&&SystemCode=='HR')
'I,'
else
'NO_ACCESS,'

PROCLEVEL: (note: this calls to the user profile's 'CompanyControl'-put in the company you want the user to have access, and 'ProcesslevelControl', where you can fill in "process-level X and Z as multi-variables)
if(user.attributeContains('CompanyControl',lztrim(COMPANY))&&user.attributeContains('ProcessLevelControl',PROCESS_LEVEL)&&SystemCode=='HR')
'I,'
else
'NO_ACCESS,'

EMPLOYEE:
if(user.attributeContains('CompanyControl',lztrim(COMPANY))&&user.attributeContains('ProcessLevelControl',PROCESS_LEVEL)&&SystemCode=='HR')
'I,'
else
'NO_ACCESS,'

HR11:
if(user.attributeContains('CompanyControl',lztrim(COMPANY))&&user.attributeContains('ProcessLevelControl',PROCESS_LEVEL)&&SystemCode=='HR')
'I,'
else
'NO_ACCESS,'

There is a bug with this however, user will need to drill and do an inquiry on an employee first before NEXT/PREVIOUS would work. I have a LIS open with lawson on this.