Prev
Next
Forums Infor / Lawson Platforms S3 Security

LSF9 security by process level AND security location - is it possible

 1 Replies
 0 Subscribed to this topic
 15 Subscribed to this forum
Sort:
Author
Messages
RachelM
Basic Member
Posts: 27
Basic Member
10/22/2010 6:57 PM
    We have been able to secure LSF9 using the element groups using either process-level or sec-location but not both; roughly what we're looking to do is ((process-level = 'X' and sec-location = 'Y') OR (process-level = 'Z')). Is that even possible using element groups? Thanks.
    Jimmy Chiu
    Veteran Member
    Posts: 641
    Veteran Member
    10/25/2010 2:47 PM
      Yes, use the builtin PROCLEVEL + HREMP element groups.

      for example:

      Define HREMP element group (SEC_LOCATION 9999999999 is open access by default):
      if(lztrim(SEC_LEVEL)=='9'&&(lztrim(SEC_LOCATION)=='9999999999'||lztrim(SEC_LOCATION)=='X')&&SystemCode=='HR')
      'I,'
      else
      'NO_ACCESS,'

      PROCLEVEL: (note: this calls to the user profile's 'CompanyControl'-put in the company you want the user to have access, and 'ProcesslevelControl', where you can fill in "process-level X and Z as multi-variables)
      if(user.attributeContains('CompanyControl',lztrim(COMPANY))&&user.attributeContains('ProcessLevelControl',PROCESS_LEVEL)&&SystemCode=='HR')
      'I,'
      else
      'NO_ACCESS,'

      EMPLOYEE:
      if(user.attributeContains('CompanyControl',lztrim(COMPANY))&&user.attributeContains('ProcessLevelControl',PROCESS_LEVEL)&&SystemCode=='HR')
      'I,'
      else
      'NO_ACCESS,'

      HR11:
      if(user.attributeContains('CompanyControl',lztrim(COMPANY))&&user.attributeContains('ProcessLevelControl',PROCESS_LEVEL)&&SystemCode=='HR')
      'I,'
      else
      'NO_ACCESS,'

      There is a bug with this however, user will need to drill and do an inquiry on an employee first before NEXT/PREVIOUS would work. I have a LIS open with lawson on this.