Re: MAPICS Security Audit

Peter,

Well said, but I'd like to point out that it should be noted that the use of personal menus complicates the security reports.

Just because a user is authorized to something, it doesn't necessarily mean that he has the menu option to run it. Also, if you run just reports of personal menu options, just because a user has a menu option, it doesn't necessarily mean that she has the authority to run the option. This gets really messy when it comes to shared application security like item master file maintenance.

At least this is the case here, so I focus on the personal menus (MNTXFILE).

Bryan Burns
ECHO, Inc.

-----Original Message-----
From: mapics-l-bounces@xxxxxxxxxxxx
[mailto:mapics-l-bounces@xxxxxxxxxxxx]On Behalf Of Peter Vidal
Sent: Wednesday, January 30, 2008 7:53 AM
To: MAPICS ERP System Discussion
Subject: Re: [MAPICS-L] MAPICS Security Audit


You can use queries over the files. Just get familiarized with the data
and the screens and you will know how to put everything together:

IFM Files:
YAAAREP - Application
YAABREP - Application User
YAACREP - User
YADQREP - User Defaults
UANHREP - User Defaults OBI
YAAVREP - Task
UAIWREP - Ledger Authority

COM Files:
MZD7CPP - User navigation defaults
MBD2REP - User file
MBA7CPP - company defaults

CAS Files:
MZBRREP - User/task xref physical file
TSKDEF - Task definition
USRGRP - User/user group xref
MZF0REP - User physical file
MZGUCPP - User security physical file
MZD6CPP - User/security area xref physical file
MZDSCPP - Security area/task xref physical file
MNUMST - MRI-Menu master
MNTXFILE - User menu option

Good luck!


Peter Vidal
MAPICS IT Technical Support Team / SR System Analyst
10540 Ridge Rd., Ste 203, New Port Richey, FL 34654-5111
Tel:727-849-9999, x2414 Fax:727-815-3120
http://www.pall.com