Re: How to grant limited access to BPCS user? Query/400

[ANTHONY_JACKSON@xxxxxxxxxxxxxx]

In the long run..would it not be better to ask users to define what
report/display they want..and create ADK DISPLAYS/REPORTS ect..then create a new
bpcs menu...ie...one for sales...one for accountants..
When you create the menus...you can define who has access to these menus...
OH...and don't forget to register the new reports/displays as a bpcs object..
_________________________________________________________________________________________
NB..users get so Hooked on querys...it becomes the norm method of reporting..and
they are very resource
hungry....(and yes i know...bpcs reports are a bit bulky...to say the least).




DAsmussen@aol.com on 25022000 05:33:12

Please respond to BPCS-L@midrange.com

To:   BPCS-L@midrange.com
cc:    (bcc: Anthony Jackson/North/CSI)

Subject:  Re: How to grant limited access to BPCS user? Query/400




Khalid,

In a message dated 2/24/00 10:49:46 PM Eastern Standard Time,
logic_km@hotmail.com writes:

> I want to give access of query/400 to my users. But I don't want them to
see
>  beyond their scope. For example sales department should not view GJD,GGM
>  files etc.
>
>  Since group profile of each user is SSA which is the owner of all BPCS
>  objects including logical & physical files; hence it is not possible to
>  restrict any user to see beyond its scope.
<<snip>>

This is a tough question.  AFAIK, SSA must still own everything in order for
you to continue to receive support.  Hmmm.  This is going to require an awful
lot of work on your part!  If I'm missing a simple solution, others feel free
to comment (nicely).

First, create a library to place the mainline query objects in using
CRTDUPOBJ (i.e., WRKQRY, RUNQRY) and duplicate them into it.  Add your new
library into the system portion of the library list above QSYS.  The latter
two steps will prevent your loss of these changes during your next OS/400
upgrade.  Revoke all authority from these objects in the new library (*PUBLIC
*EXCLUDE with no other specifc authorities).

Now, create new user profiles with group profiles (other than SSA) that
represent what sets of files to which people have access under query and
grant access to your new query objects to these group profiles.  Then create
and assign authorization list entries to the files based upon the new query
groups, ensuring that *PUBLIC is set to *EXCLUDE for the files.  Query users
must sign on with their query profiles in order to query the files.

Tough work.  Perhaps someone else can come up with a simpler solution, but I
don't think so...

HTH,

Dean Asmussen
Enterprise Systems Consulting, Inc.
Fuquay-Varina, NC  USA
E-mail:  DAsmussen@aol.com

"Everywhere is walking distance, if you have the time." -- Steven Wright
+---
| This is the BPCS Users Mailing List!
| To submit a new message, send your mail to BPCS-L@midrange.com.
| To subscribe to this list send email to BPCS-L-SUB@midrange.com.
| To unsubscribe from this list send email to BPCS-L-UNSUB@midrange.com.
| Questions should be directed to the list owner: dasmussen@aol.com
+---


Tony Jackson.
BPCS Support.
DCS Industry Solutions
Caledonia   House,                  Office   :       +44   (0)   113   204  3300
Email :   ANTHONY_JACKSON@dcsgroup.co.uk
Lawnswood  Business Park,   Facsimile :  +44 (0) 113 204 3333           Web Site
:www.dcsgroup.co.uk
Redvers Close,                 Mobile:        +44 (0) 7712 086679
Leeds, LS16 6QY
United Kingdom.










**********************************************************************
The information contained in this electronic mail message is 
confidential. It is intended solely for the use of the individual 
or entity to whom it is addressed and others authorised to     
receive it. If the reader of this message is not the intended 
recipient, you are hereby notified that any use, copying, 
dissemination or disclosure of this information is strictly prohibited.
**********************************************************************
+---
| This is the BPCS Users Mailing List!
| To submit a new message, send your mail to BPCS-L@midrange.com.
| To subscribe to this list send email to BPCS-L-SUB@midrange.com.
| To unsubscribe from this list send email to BPCS-L-UNSUB@midrange.com.
| Questions should be directed to the list owner: dasmussen@aol.com
+---