Hello, I set up AP, GL and AC for SEC1 security class and went to data security and did INQUIRY ONLY for everythig. I was told that this won't stop users from submitting the batch programs in those modules. So I went to each batch program (non-reporting) and took all the options out except for INP. Q: Is that the best way or there is something faster than this Now I had to set up a new class SEC2 where it had INQUIRY ONLY for AP and AC but full access to GL. I copied SEC1...

One of our security class is unable to add records on GL40.2 though their security seems to be fine. They have access to create journals. They can't release it though. Any ideas There is no data security but that class has inquiry only access to all other systems.

1. Can Lawson handle data encryption Example, decrypt an encrypted value in an Oracle table and display on a form. 2. Can field security be implemented at the form level There is a field security for Drill Around but is there one for Forms so it will be displayed with '*' if restricted.

I am not sure about LOGAN security. Do we need to give users LOGAN at all Some of our users are approvers in processflow so I know that that they need to be given security to WF23 atleast so that they can write comments. (atleast their comments end up in WF23). Some are EDI users. But for most crowd, what is the minimum access Please let me know.

We have a user who needs to view TR21 to review training information on employees. We do not want this user to be able to drill around on the employee number. Security is set to where the EMPLOYEE file is not available thereby taking care of drill security. However, the search options under the employee number drop-down field on TR21 are also not available so this user cannot select employees by name as this points to the EMPLOYEE file. Is there a way to grant the Employee Name search option...

I need a list of all Forms for HR suite with the available function codes for each form. I did the dump file (rngdbdump -c gen vallstuse > functioncodes.dmp) but have a few issues with this unfriendly file: 1) The Value column has more than just function codes in it. In order to eliminate all rows that are not function codes, I'd need a complete/inclusive list of all possible function codes - which I cannot locate. i.e. HR11.2 shows as follows Values of H (hourly) , I (Inqui...

We are attempting to write a rule in Lawson Security to allow users access to jobs defined by other users in the same group. When using the function isMemberOf(group,lookup) using the UserName element in GEN, we fail because that UserName is a windows NT identity (NT00001). I cannot find a way to translate that UserName into the RMID that is required for isMemberOf(). Can anyone offer suggestions on how we can accomplish this. We are a new Lawson install and trained on 9.0 and Lawson Securit...

I have been trying to build a rule in LSF 9.0 security where if a certain personal action is choosen it would only show certain reason codes. I have tried to build this rule on the PCODES table with no luck. Has anyone come across a rule for this on PA52. Thanks!

I am trying to get the drill around to work properly it works for some and not for others...i am in LSF9.0 I have researched and added the tables that were seemingly required but still is not working on all of the areas of the form...does anyone have a suggestion...I stripped the security class all the way down and started adding one at a time to see if there were any significant changes and still no working...in need of help...

I am looking at users that have access to GL00.1. If the security group has full access to the form in the sec-form file, but does not have a listing for the 'IF' System Code in the Sec-data file. Can they still have access to GL00.1 Thank you, Miles

I gave someone access to bn32 but they can not search for the employee by name or number. I apparently need to give them access to something else. I do not want to give them access to hr11, I only want them to have bn32 with the ability to use the drop down on the employee field to be able to pick or search for the employee. This is similar to my next question, I have given someone pa52 access, but when they click the dropdown to select the action, the action list is blank. Since the acti...

We are looking at implementing Employee & Manager Self Service and have been told by one person that we may want to wait until we upgrade our environment to version 9. This has to do with the huge differences in the security between 8.1 and 9. I'm not sure if this was a STRONG recommendation or just a SLIGHT recommendation. We have to upgrade the environment to 9.0 before July 2008. What would the pros/cons be if we implemented ESS/MSS now and then did the environment upgrade in ...

We are testing out 9.0. I know you can still use LAUA security in 9.0; but 1.how do you turn it on 2. add new users in 9 so we can use exisiting laua security classes. We normally in 8 we added new user to lawson local group on server, then user showed up in laua.

Has anyone got a format of the 9.0 laua security file formats Such as for USER, USERCND, etc. and then the Environment Group files USERGRP, USERGRPDTL, etc. files. I have searched on support but was unable to find them. I don't know if the format from 7.3.3/8.0.3 has changed in 9.0. Yes I know I could do a dump of 9.0 files before and then get the format. (I am doing a conversion of 7.2.2 security to 9.0). Thanks in advance, -Roger

We are running into issues regarding users secured through laua and users not secured (Employee Self Service Users only). We implemented LSF9 and are using laua. We have two type of users - Lawson users that are secured via laua and Regular employees that only need to view paycheck or change addresses, etc. and are not secured via laua. Is there anyone in this situation that may be running into access issues security violations Example: If I am assigned a laua securi...

I'm trying to make a query to pull most of the info that can be found on the tknsecrpt but there are parts that the powers above don't care to see. We are currently on 7.2.2.4 if that is going to make a difference in the file names. Basically need to see by Sec Class what forms and options on forms each sec class has access to.

In the Lawson Administration Resources and Security Guide (page 242), one of the Lawson-delievered roles listed is PortalBookmarkRole. In our installation, that role was not delivered; instead, we have a PortalBookmarkAdminRole. In a recent LIS inquiry to Lawson about this, they said the guide was a typo. I was wondering if any other installations actually had the PortalBookmarkRole delivered. What concerns me is the 'Admin' piece of the role title we have. I want to make sure t...

Can anyone tell me what the GROUPDATA node is used for within the XML template used for loadusers I have poured over the Resources and Security manual, and it shows GROUPDATA node. It basically says you can add groups to the system, and I can see the examples they show.. Ok so yes I understand that. Ok, so what KIND of groups, and what are the groups used for And how do they work Is it the same as Bookmark Group People Group I wished these manuals would be better at documenting s...

Is there an easy way to give inquiry only access in LID I currently have to go into each product line (HR, PR, PA, GL, AP, etc) and set up as inquiry only when it seems like I'd be able to give this to all product lines/forms at once Also - this is odd to me - but I gave inquiry only for HR/PR prod lines and the person does not get the drop down selector box on hr11..I went into the table security and by default it appears that they have access to all the tables unless you lock them dow...

I created a system code to store user programs, how do I get Lawson Security 9.0 to recognize it I can see it and assign it in LAUA but when I try to add the rule in LS9, my user created system code is not showing.

I'm trying to secure form RQ10.1 to users based on a custom attribute called DepartmentControl (String 4) - Here's what I've got, but it keeps giving me security violation to users who have multiple values in DepartmentControl... (trim(form.RQH_REQ_LOCATION) == trim(user.getAttribute('DepartmentControl'))) || (trim(form.RQH_REQ_LOCATION) == trim(user.attributeContains('DepartmentControl',getDBField('REQUESTER','REQ_LOCATION',trim(user.getAttribute('DepartmentControl')))))) || (trim(form...

I'm trying to allow a select, but secure the drill explorer capability on a form. Specifically, we want our hospital campus security department to update vehicle information on PA17.1. I want them to be able to click on the gray down arrow in order to select on Company and Employee field. I've removed the FICA number from display on the form and display on the Select screens. But in allowing the select, it opens up the 'world' if they right-click and drill. Is there any way to allow Selec...

I'm using security 9.0 and I would like a user have restricted access for a specific department (Employee.Department). I'm able to restrict access on HR11 form and on Drill Explorer but when I print a report all the department are one the list. Is there a way to have only the restricted department on the report