Re: 4.05 CD GLD menu access

Think very carefully who should have access to GLD900.



If someone runs EOY final prematurely, you are SOL unless you have a backup
from before they did that. The company might not find out someone did that,
until you need to post the final EOY adjustments, and discover you cannot.



If you have Y up top for GLD, or anything else, and list specific program
names down below, such as each of the GLD7 series and GLD900, and you might
review what's on other GLD menus, then those people can access anything in
GLD EXCEPT the stuff you specify down below that they may not access. In
other words you list the 5+ programs that you are banning them from access,
or more if like us you have some GLD modifications and additions to GLD
collection.



We do this kind of thing on many applications ... users have general access
to INV, SFC, PUR, various accounting applications, but we block end-of-month
and end of year, so that only certain authorized persons may do end fiscal.



If you have N up top for GLD, or anything else, and list specific program
names down below, then they can ONLY do the specific GLD program names you
list, but there may not be enough room to list everything they need.



We do this approach for users who may only access an occasional report or
inquiry in some application.



If the user is coded BPCS security officer, they can do anything in BPCS,
regardless of what the BPCS security screen says about them.



All of this logic is blown out of the water, if they have command line
access, or use a PC to access BPCS, because in 4.05 land, you can bypass
BPCS security to access BPCS files and data, unless you have installed one
of the security upgrades to avoid this.



There's one you can get from Infor.

UPI also has a fix which is much cheaper and simpler to get installed.



UPI also has a set of security enhancements which makes it easier to manage
what you are trying to accomplish.



-

Al Mac

-----Original Message-----

From: bpcs-l-bounces@xxxxxxxxxxxx [mailto:bpcs-l-bounces@xxxxxxxxxxxx] On
Behalf Of Don Cavaiani

Sent: Tuesday, February 15, 2011 4:26 PM

To: bpcs-l@xxxxxxxxxxxx

Cc: Gary Brochtrup

Subject: [BPCS-L] 4.05 CD GLD menu access



Just to be sure ...



I have 10 user id's with a "Y" for access to the entire GLD menu.



Now, I need to have only 2 of the 10 have access to the Special

processing options -- # 22 -> # 26.



Is there any other way to do this other than to remove the "Y" for GLD

for the other 8 users, and then give them (the 8) each specific access

to every other GLD menu program number other than the 22 - 26 programs?



TIA