Re: User Group Security Maintenance -- BPCS-L

BPCS was re-written several places in V4 to V6 & one of those areas was
security.
So what we know about Security is version specific & I also am being a bit
obtuse because I do not want to give out information that some readers of
these posts might not be authorized to access.

I think it is incredibly simple to operate, once you understand / get past
some fundamental mental leaps.  What I am saying is V4 ... there may be more
stuff V6.

SYS600 manages A LOT of BPCS security but NOT all of it.

SYS600 basically says this or that person can get into ACR this or that or
other prefixes ... but there is another menu option where you can go to say
combinations ... for example do not let someone run INV900 & other end-month
tasks unless they have GLD security in addition to INV security.

There is some stuff that SSA GT has hard coded ... you can follow the
documentation to let someone into something & it won't work ... you have to
ask SSA Help Line for clarification.  There is some stuff we are not using
because the only way to get it to work is to liberalize security more than we
comfortable with.

We use the add-on menus quite heavily ... We have given some users specific
access to some clean up options like SYS993 & SYS013 & they are on a menu
called FXS (Fixes) ... those people do not have SYS security but they can run
those options from FXS menu ... only our power users have FXS menu access

AS/400 iSeries WRKUSRPRF also has some BPCS related security settings ...
most of our users have as their 2nd access, after BPCSMENU, *SIGNOFF which
prevents accidentally F3 out of BPCS to OS/400.  We also have stuff like what
happens if user pushes Attention Key.

SYS600 has two screens in V4
The first one on top has a list of applications & down below space for
exceptions.

If up top for an application is Y (Yes) then exceptions down below mean NO
e.g. we have people with Y (Yes) on top for INV SFC JIT etc. but down below
NO for options associated with end-fiscal ... these people can run ANY of
those up top options except those listed below.

If up top for an application is N (No) then exceptions down below mean YES
e.g. we have people with N (No) in general for an application then down below
YES they can run INQUIRY associated with that application such as BOM300
CST300 SFC350 etc. to see the application data but not be changing it.

There is some other stuff on top line of first screen of SYS600 associated
with if the user has command line access, communicates in foreign language

SYS600 second screen controls what kind of stuff user can do when in those
programs you gave them access to ... for example you can limit people to
specific transactions ... think what a receiving clerk might do as opposed to
a production order input person.

Version 405 CD comes with BPCS on-line documentation for BPCS security,
It is contained in several of the BPCSDOC documents.
It is a bit obtuse ... I had to read several places several times to figure
it out.
Once you see the directory of BPCSDOC documents, you will see several that
seem relevant to security information, but you will need to read the SSA
Logic Manual on-line to identify all of them.

Assuming you have the cooperation of your company's Security Officer,
adjusting settings so that you can go to the DOC menu & view all the on-line
BPCS documents should be a simple matter.

We have adjusted our user menus so that people can go directly to the on-line
BPCS documentation relevant to their area of speciality.  For example we have
our own COST menu & it has options to go to the SSA COST document & our own
internal COST documentation that supplements the SSA one.  This way we do not
have to have people navigating the DOC menu through all the options not
relevant to their area.

Warning ... If no one at your site has ever explored Menu DOC before, you may
need to take the option to rebuild the index (option 16 on V4 menu).

Warning ... if you do not use "standard size green bar paper" there is a BPCS
bug in the DOC system at V4 that messes up alignment if you try to print BPCS
documents through the front door.  SSA may or may not have fixed that by V6.

We use the SEU LP option to print just a few lines at a time & End-of-SEU
screen if we want to print a whole BPCS doc ... this can also be done off of
PDM.

Warning ... if the person viewing the BPCS documentation on-line is not a
programming person, you can find the interface to be a bit obtuse, so I
highly reccommend picking up a copy of the IBM manual on SEU to help see all
the short cuts available ... Search Engine/400 for navigating PDM documents.

As I said, a lot of it is explained in the Logic Manual = Member SSALOG00
But there is also several Members specific to BPCS Security ... You have to
wade through the Logic Manual first to understand the naming conventions so
that you can navigate the other BPCS On-Line documents.

> where can i find the BPCS on-line documentation for BPCS security ..???
>  as far as i have the documentation there's none of them mention about the
>  thing that i need.
>  or might be i don't have that document yet..
>  can i get that documentation..??

MacWheel99@aol.com (Alister Wm Macintyre) (Al Mac)