Re: Security type S and access to menus

the best way i've seen it set up..when you have many users is,to create
generic user profiles...ie one for accounts,one for warehouse ect...and then
copy to users...and yes 'S' overides all. and is a bit dangerous,if someone
stumbles onto sys menu..

-----Original Message-----
From: Lacelle, Marc <LACELLE@rcmint.ca>
To: 'BPCS-L@midrange.com' <BPCS-L@midrange.com>
Date: 05 January 2000 18:43
Subject: RE: Security type S and access to menus


>Hi Ho Bob
>
> Security type "S" overrides everything. User will have access to all
>programs including SYS programs.
>
> You should only have 1 one "S" user per environment or maybe two
>(backup if the other user is sick). All other users should be "U".
>
> All your users should be set to "0" for Prod All. Prod All gives
>access to all programs EXCLUDING a few SYS programs.
>
> If granting access to users to Products (re: ACP,INV,MRP) remember
>this,
>
> Programs between 100-199 are Maintenance / Listings
> Programs between 200-299 are Reports
> Programs between 300-399 are Inquiries
> Programs between 400-499 are Reports
> Programs between 500-699 are Transactional
> Programs between 700-999 are Hands off (only qualified users)
>
>When setting up user profiles remember one thing they do not need access to
>the 1300 so programs. The bulk of users will only use about 20-30 programs.
>
>Remember this, the more you give a user, the more it impacts on performance
>and data integrity. Be wise
>
> Marc Lacelle
> Royal Canadian Mint
>
>
>
>> ----------
>> From: Mack, Robert M.[SMTP:Robert.M.Mack@sgcna.com]
>> Reply To: BPCS-L@midrange.com
>> Sent: Wednesday, January 05, 2000 11:50 AM
>> To: BPCS-L (E-mail)
>> Subject: Security type S and access to menus
>>
>> Please help an auditor understand the 1s + 0s under Authorized
>> Applications
>> and Authorized Programs.
>>
>> They way it was explained was under the Applications, for example
>> ACP
>>   0
>>
>> This would indicate that the user does not have access to the ACP menu.
>>
>> However under authorized programs the same user has:
>> ACP155D
>>      1
>>
>> This tells me that they can access just that ACP function.
>>
>> Here's where things start get confusing.  User A has Application ACP 0
and
>> Program ACP900D 0 , ACP910D 0, ACP920B1 0 and ACP920D 0  (all of them
>> listed
>> twice).  Sounds kind of redundant or is this just to make sure the user
>> can't get to those programs.
>>
>> To top it off the user has a security type of S.  does this mean that
none
>> of the above matters?  I've already RTFMd but BPCS doc is not the most
>> user
>> friendly.
>>
>> I've got financial auditors trying to determine what a user can get to
>> though the menus.  I thought it would have been easier to sit at the
users
>> screen and just access the menus that come up.
>>
>> Sorry for the longwinded question, any help will be appreciated.
>>
>> Thanks,
>> Bob Mack
>> IT Auditor
>>
>> +---
>> | This is the BPCS Users Mailing List!
>> | To submit a new message, send your mail to BPCS-L@midrange.com.
>> | To subscribe to this list send email to BPCS-L-SUB@midrange.com.
>> | To unsubscribe from this list send email to BPCS-L-UNSUB@midrange.com.
>> | Questions should be directed to the list owner: dasmussen@aol.com
>> +---
>>
>+---
>| This is the BPCS Users Mailing List!
>| To submit a new message, send your mail to BPCS-L@midrange.com.
>| To subscribe to this list send email to BPCS-L-SUB@midrange.com.
>| To unsubscribe from this list send email to BPCS-L-UNSUB@midrange.com.
>| Questions should be directed to the list owner: dasmussen@aol.com
>+---
>

+---
| This is the BPCS Users Mailing List!
| To submit a new message, send your mail to BPCS-L@midrange.com.
| To subscribe to this list send email to BPCS-L-SUB@midrange.com.
| To unsubscribe from this list send email to BPCS-L-UNSUB@midrange.com.
| Questions should be directed to the list owner: dasmussen@aol.com
+---