Re: 4.05 CD GLD menu access

Al,

Thank you! I just tried this out, and it works well, and will save us
some time.

Don

-----Original Message-----
From: bpcs-l-bounces@xxxxxxxxxxxx [mailto:bpcs-l-bounces@xxxxxxxxxxxx]
On Behalf Of Al
Sent: Tuesday, February 15, 2011 9:15 PM
To: 'BPCS ERP System'
Cc: Gary Brochtrup
Subject: Re: [BPCS-L] 4.05 CD GLD menu access

Think very carefully who should have access to GLD900.



If someone runs EOY final prematurely, you are SOL unless you have a
backup from before they did that. The company might not find out
someone did that, until you need to post the final EOY adjustments, and
discover you cannot.



If you have Y up top for GLD, or anything else, and list specific
program names down below, such as each of the GLD7 series and GLD900,
and you might review what's on other GLD menus, then those people can
access anything in GLD EXCEPT the stuff you specify down below that they
may not access. In other words you list the 5+ programs that you are
banning them from access, or more if like us you have some GLD
modifications and additions to GLD collection.



We do this kind of thing on many applications ... users have general
access to INV, SFC, PUR, various accounting applications, but we block
end-of-month and end of year, so that only certain authorized persons
may do end fiscal.



If you have N up top for GLD, or anything else, and list specific
program names down below, then they can ONLY do the specific GLD program
names you list, but there may not be enough room to list everything they
need.



We do this approach for users who may only access an occasional report
or inquiry in some application.



If the user is coded BPCS security officer, they can do anything in
BPCS, regardless of what the BPCS security screen says about them.



All of this logic is blown out of the water, if they have command line
access, or use a PC to access BPCS, because in 4.05 land, you can bypass
BPCS security to access BPCS files and data, unless you have installed
one of the security upgrades to avoid this.



There's one you can get from Infor.

UPI also has a fix which is much cheaper and simpler to get installed.



UPI also has a set of security enhancements which makes it easier to
manage what you are trying to accomplish.



-

Al Mac

-----Original Message-----

From: bpcs-l-bounces@xxxxxxxxxxxx [mailto:bpcs-l-bounces@xxxxxxxxxxxx]
On Behalf Of Don Cavaiani

Sent: Tuesday, February 15, 2011 4:26 PM

To: bpcs-l@xxxxxxxxxxxx

Cc: Gary Brochtrup

Subject: [BPCS-L] 4.05 CD GLD menu access



Just to be sure ...



I have 10 user id's with a "Y" for access to the entire GLD menu.



Now, I need to have only 2 of the 10 have access to the Special

processing options -- # 22 -> # 26.



Is there any other way to do this other than to remove the "Y" for GLD

for the other 8 users, and then give them (the 8) each specific access

to every other GLD menu program number other than the 22 - 26 programs?



TIA