Report for Security Role on User Profile

You'll get a chuckle out of this!

The flag for LAUA Admin Role appears to be stored in the FillD (as in filler D) column of the GEN USER table. Here's a quick way to get the list. From the LID command line:

rngdbdump -c gen user -f username filld | grep '1$'

Best regards,
Dave
(303) 773-3535

That did it ... and Yes, Thank You Mr. Obvious (NOT!)

Is there any resource on what the columns contain from the gen user table? specifically, column SECOFFICER and FILLD, and what they reference in laua?

If SecOfficer in the GEN USER table contains a 1, then that user has the LAUA role of Officer.
If neither SecOfficer nor FillD contains a 1 (they both are empty or zero), then the Role is None.

I'm not aware of a data dictionary that describes the GEN tables. Fortunately most of the tables and columns have meaningful names - and you can experiment with various items to see how the tables are affected. The GEN database was actually very cleverly designed and has managed Lawson for many years - but the tables can be challenging to decipher.

And, as I'm sure you know, do not directly update the GEN tables nor bring a live grenade to the office. Both can cause irreparable harm!

isn't that the truth.

Thanks for your help - it's much appreciated.

I use a query tool and would love an ERD of the GEN and/or Data File Text, but that could be dreaming.... I'm trying to use these tables to get a list of all forms (and subforms) and their descriptions. My DBA did not open me to the 'system' tables, so that could house my missing link, I'm using the 'user' tables...but I need the linking table that will link the following:

GEN.dbo.PROGRAM will give me the major forms and their description (i.e. HR11).

GEN.dbo.SCREEN will give me the subforms with their descriptions (i.e. HR11.1, 11.2, 11.3) but it shows them as HR11 scrnbr 49, 50 & 51

GEN.dbo.EXECUTABLE shows me the HR11.1, 11.2 & 11.3 but does not give me their descriptons and refers to their scrnbr as 1, 2, 3 vs the 49, 50 & 51..I need something that will link this with the SCREEN table. i.e. hr11 scrnbr 1 = scrnbr 49, hr11 scrnbr 2 = scrnbr 50, etc.

I'm thinking that a GSC ticket will result in them telling me that this is all top secret and that we should hire LPS to give us our query and/or info..

I am about ready to release a tool that combines all of that data (LS, LAUA, RM/LDAP, etc. ) and has built in reports. Would you be interested in being a beta?=

beverly:
You can develop an ERD for GEN if you'd like....

1) Download/Install of GraphViz software program that produces the graphing capabilities for SchemaSpy
http://www.graphviz.org/Download.php
2) Download the SchemaSpy java jar file
http://sourceforge.net/projects/schemaspy/
3) I downloaded a GUI front-end for SchemaSpy * Not technically necessary, but very handy!
http://mac.softpedia.com/...a/SchemaSpyGUI.shtml

Then configure SchemaSpy with the host/port userid/password to access the DB, and give it a few more parameters, and start.
Depending on the size and analysis that needs to be done, it will take somewhere between 5 - 20 minutes to run, and will create
web pages for you that contain much of the information.

If you'd like more information, just let me know!
-Greg

Beverly,
I think GEN.TITLE may give you what you want, based on what you seem to be asking for in this post.

Dave A,
Man, you are the best. I RARELY create Admin SecClasses, and I had never even bothered to look at what Lawson had done to implement it. You have been around long enough to recall this was shoehorned in back in 7.3.2, when Lawson first added the 'ASP' features (recall that silly CFG file setting, that couldn't be undone...)

John H,
I'm not sure what type of client, but I'd love to help you get this right. I'll sign an NDA if you need, due to my place in the Lawson food-chain. Hit me offline if you need anything.

Greg,
Hit me off-topic (via email or a PM, or something) on this. Typically this doesn't work so well, because Lawson doesn't store the relationships in the system. I think all you really get as helps are primary index constraints and hoping field names are the same. If you had better results than that, I'd be curious to know if you did something a bit different.

Greg, while creating the schema will get you the tables and indexes, it doesn't include the relationships or constraints, etc. In other words it's better than nothing but not the whole picture. To get that you have to spelunk around in the GEN dictionary (primarily scratching your way thru via dmpdict). Yes, I've done it.

I can post a partial ERD for GEN if anyone is interested.

John, I would be interested in being a beta tester for the tool that you are developing. Can you provide me more details about this.

Posted By beverly godwin on 06/22/2011 08:29 AM
John, I would be interested in being a beta tester for the tool that you are developing. Can you provide me more details about this.

https://www.danalytics.co...ecurityExaminer.aspx

John, I think I'd be interested in being a beta too. We seem to be having a LOT of security-related issues with our upgrade. (*Involved lots of new hardware, new servers, etc.)

John H,
Recall my 06/15 post...I'll help, if you allow. If you need an NDA, no sweat.

Greg M,
Feel free to hit me up, I have expertise in the infrastructure area. Based on the way you phrased your statement, it's possible that some of your issues may not be Lawson-related.

Kwane