Ok, Have discovered that a new option for laua on a Windows/AD platform. There is an issue if using the AD with Windows, and *not* being able to see users who were added to a global group within AD, in LAUA. (The KB Article is 100688.) So if I tried to add a new user to Lawson, first add them to a global user group in AD. Then synch up with the Lawson app server (where the environment is at). (So, this next part I am asking if others have seen this, or if this is t...

My company is on LSF AIX environment with 8.03 Apps and Security. I created a couple of simple shell scripts and then used tokendef to define them as forms. After I created the job using jobdef, I tried to run submit the job from portal but got a 'Job Queue is Secured' violation. I took a look at the permissions of the actual scripts and they all have read-write-execute permissions for the user I logged in with into portal. Any ideas

I'm trying to remove bank info from a security class that can run the pr260 Payment Detail report. I've removed the fields/tables in security laua that houses the bank info for the PR area...but it is still showing up on the report. I would have thought that this would surely do the trick.

Is there a way to restrict the jobschd listing to only allow deletes of non-update jobs in the new Lawson security, or is that already built in  Looking at the security class, I only see All_Access or No_Access on the jobschd utility.

Is there a way to track Employee Self Serve logins    Knowledgebase mentions the user table, but I am not sure how that works.

Anyone knows how to write conditional rule access for Currency Code table file This is the CUCODES table file under IF system code in the Securable Type Files. I have a Currency Code Form CU01.1 and want to write a rule to block user access so that they cannot add or change currency code. I set the Unconditional Access for Action to 'I' for CUCODES under IF system code in the Files level (not Online), but it is not working; user can still add/change a new currency. I want to do this in th...

Does Lawson store the user creation date somewhere I need a user report with date the user was created. Any ideas

Is there a tool that can be used to remove a role from multiple profiles at the same time, such as you you would apply it to multiple roles simultaneously using Mass Assignment in Resource Administrator We have a role that we'd like to remove from several hundred user profiles, but leave all other roles on those profiles in place. Has anyone else encountered this situation and know of a way to accomplish this Thank you.

Hello all, Trying to create a conditional rule within LSF9 security. I want to do something only if the the System Date is within two other dates on another screen such as the BS01 (a date range). But I can't seem to get the getSystemDate() function within the rule editor to work. Does anyone know the actual format of the returned date by using getSystemDate(yyyyMMdd) I have tried it and it seems to not be returning a correct date in the same format (yyyyMMdd). It seems to be retu...

Does anyone have a way that a particular role can bve removed from multiple user profiles, removing only that role and leaving any otehrs they have in tact We had created a role and applied it to all users a while back. Now we've determined that role is no longer necessary and would like to reomve it from all users. Has anyone ever made this change, en-masse, for all users Thank you.

Maybe I'm missing it somewhere.... Is there a report I can run that will list each RM group and the users assigned to that group

I am looking to get rid of user accounts, on my development box, that have not accessed the system in 6 months. Is there a place where the last access date is stored If not, any other ideas

If there is such a thing...But, I can't figure this out. We are implementing RoleBased Security (Check LS = Y) for Ess/Mss for portal and one thing I cant seem to get to work for Manager Self-Service is the Drill on Employee Information piece in the Direct Reports listing. Basically, I just want to get rid of some of the links in that Employee Drill Menu: Current YEar Earnings, Deductions by Quarter, etc... We dont need managers to see this stuff, and I have resticted access to the files...

Hi, we are on LS9 and came across an issue where an ESS employee can view another employee’s personal information through a servlet call. The employee uses a debugging tool to get the URL then substitute their employee ID with someone else’s. We’ve tried to lock down all the HR, PA, PR, etc. related tables and forms with conditional rules. But we are still able to return sensitive data using the servlet call. Tried with this rule: if(user.getCompany()==table.COMPANY&&user.getEmployeeId(...

Hi, We are using LSF9 for ESS. I created some custom htm page that display and update data in a custom file. I also created a custom 4GL program to view and update the table. The Security officer gave me access to the new table. I can look at the file and updated using my custom 4GL program however I can not do dme calls on that table and I can not query the table using Crystal reports. It looks like it is only related with dme calls. Here is the error saying that the Table data is...

Where does Lawson store the date of the last password change for a user

We are creating a new role for someone to be able to drill back to payment information from the GL90. We have been able to get the payments to appear, but they can not see employee names. We have given them PR51 form access and they can see names on that form but they can not select an employee from the search box We have given them acces to all the tables that the PR51 references - EMPLOYEE, PRSYSTEM, PAYMASTR, PRTIME etc. Do we need to add some invoked program If so, which one(s)...

We are planning to install LSF9.0 if any one can you provide different SOD scenarios for LAWSON Finance and HR/PR before creating roles/rules we need review those

We have users who use Portal at the office during the day. These users are Back Office users and they run Payroll and do HR stuff. How can we stop these users from accessing the standard Portal from outside the office and only allow them access to the ESS Can we do this by Port they are using or by IP.

Howdy Gurus, Any ideas on ways to audit user activity I have discussed this with Lawson and they can only audit activity in the LSA tool. I want to audit actual users of the system. Any ideas on Lawson functionality or custom processes to audit this kind of activity. I would like to know of what your companies due to handle this or if there is just not a need for it. Many thanks for any replies. Matt

I have pay information defined in HR10 as SEC_LVL 1 When I go in HR11. Only SEC_LVL 1 users can see the pay info. However, SEC_LVL 2-9 users can drill down on HR11 and still able to see the pay info. What am I missing

Does anyone have a good method of securing the onmouseover events/messages within RSS I have secured buyers from the ability to actually Checkout, but that has also prevented the mouseover messages from appearing too. When the mouse cursor is put over the requisition information in the checkout list, I DO want the ability to see the messages, but I do NOT want the ability to actually checkout the requisition. Does anyone know how the mouseover messages are secured Thank you, Roger

In the Lawson Security ENV profile you find these: - rptgen.exe is in Development Tools - cnvexp is in Delivery Tokens - cnvimp is in Delivery Tokens  - cnvtape should appear in Translation Tools When cnvtape exists in $GENDIR/bin but doesn't appear in the LS9 Security Administrator's 'Translation Tools' (or any other grouping of executables in ENV), does anyone know how to make it appear  Best regards, Dave (303) 900-AMEN

In this system, I have adopted, there is a security case on our production server called PRODALLACCESS.  This class grants All Access to the following: Online: All the system codes listed (AR, AC, CB, GL etc...) but it does not give specific access to the tokes within. Securable Type: Form, Program, Table Data Source: GEN, LOGAN, PROD Can anyone tell me exactly what the purpose of this class would be  seems strange if it was giving access to the whole product line I would expect it to give ...