Disallow all menu and security items

Yahoo Archive
1
Might be more work than it is worth but you can create your own menu levels under "mainmenu" and populate them with position specific items (or not) and then assign access to persons included in specific position related groups. Then disallow these groups of users from the standard vantage menu branches so all they will see is their specific menu. I do almost all my menu rights by groups and very seldom username. This is one of those "get it right from the beginning" things where how it gets set up makes a big difference later...had I only known then. Another item on my list of reasons to start over fresh with 8.x and not migrate the existing data.
-Todd C.

________________________________
From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf Of Michael McWilliams
Sent: Wednesday, November 28, 2007 9:45 AM
To: vantage@yahoogroups.com
Subject: [Vantage] Re: Disallow all menu and security items


No, I want to disallow down to the very bottom level. The actual
programs. Certain users/groups have access to only some setup and
some of the general operations. We want to restrict everything and
then open each program up from that point. Was hoping there was a
quick way.

--- In vantage@yahoogroups.com<mailto:vantage%40yahoogroups.com>, "Ken Williams" <ken@...> wrote:
>
> If I understand what you're asking for, just disallow on the top
most
> part of the menu structure, if they don't have access to the
topmost
> folder they can't get to the rest of them.
>
> For example, if I want to disable all menu items under Order
Management,
> I just disallow access to the Order Management folder.
>
> ________________________________
>
> From: vantage@yahoogroups.com<mailto:vantage%40yahoogroups.com> [mailto:vantage@yahoogroups.com<mailto:vantage%40yahoogroups.com>] On
Behalf
> Of Michael McWilliams
> Sent: Wednesday, November 28, 2007 8:31 AM
> To: vantage@yahoogroups.com<mailto:vantage%40yahoogroups.com>
> Subject: [Vantage] Disallow all menu and security items
>
>
>
> Is there a way to quickly disallow every item in the menu
structure
> for each user without going through each one and checking disallow
for
> all users?
>
>
>
>
>
>
> [Non-text portions of this message have been removed]
>





[Non-text portions of this message have been removed]
2
Is there a way to quickly disallow every item in the menu structure
for each user without going through each one and checking disallow for
all users?
3
If I understand what you're asking for, just disallow on the top most
part of the menu structure, if they don't have access to the topmost
folder they can't get to the rest of them.

For example, if I want to disable all menu items under Order Management,
I just disallow access to the Order Management folder.

________________________________

From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf
Of Michael McWilliams
Sent: Wednesday, November 28, 2007 8:31 AM
To: vantage@yahoogroups.com
Subject: [Vantage] Disallow all menu and security items



Is there a way to quickly disallow every item in the menu structure
for each user without going through each one and checking disallow for
all users?






[Non-text portions of this message have been removed]
4
No, I want to disallow down to the very bottom level. The actual
programs. Certain users/groups have access to only some setup and
some of the general operations. We want to restrict everything and
then open each program up from that point. Was hoping there was a
quick way.

--- In vantage@yahoogroups.com, "Ken Williams" <ken@...> wrote:
>
> If I understand what you're asking for, just disallow on the top
most
> part of the menu structure, if they don't have access to the
topmost
> folder they can't get to the rest of them.
>
> For example, if I want to disable all menu items under Order
Management,
> I just disallow access to the Order Management folder.
>
> ________________________________
>
> From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On
Behalf
> Of Michael McWilliams
> Sent: Wednesday, November 28, 2007 8:31 AM
> To: vantage@yahoogroups.com
> Subject: [Vantage] Disallow all menu and security items
>
>
>
> Is there a way to quickly disallow every item in the menu
structure
> for each user without going through each one and checking disallow
for
> all users?
>
>
>
>
>
>
> [Non-text portions of this message have been removed]
>
5
Though not specifically pertaining to your question, I have an idea that
might be applicable, and was wondering if others were locking down
access in this way:

Coming at the security issue from the Microsoft engineering side of
things (what MS refers to as the "AGLP model"), I envision a perfect
world where access to any menu/function is controlled by allowing or
disallowing a group (or groups) based on roles or needs, as opposed to
allowing/disallowing individual accounts. Granted, the initial
setup-time may be greater (since you'd need to think about and create
appropriate groups), but the long-term maintenance would be much easier:
When a new employee joins the company or an existing employee shifts
positions, you could easily duplicate the group-membership details from
the old employee to the new, rather than having to sift through each
menu/function to update rights.

I ran into this issue when two of our managers left in the same period,
and we had to re-distribute their rights to multiple other users; it was
a week before we found all of the places where the security was
specifically defined for their accounts.

Since Vantage was implemented long before I arrived on scene, I don't
know if it was a conscious choice to do it this
granular/individual-rights way, or if it just happened along the road.
Is there an accepted "best practice," or is this a "perfect world" idea
that wouldn't pan out in reality?

Thanks.
--Ari
________________________________

From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf
Of Michael McWilliams
Sent: Wednesday, November 28, 2007 9:45 AM
To: vantage@yahoogroups.com
Subject: [Vantage] Re: Disallow all menu and security items



No, I want to disallow down to the very bottom level. The actual
programs. Certain users/groups have access to only some setup and
some of the general operations. We want to restrict everything and
then open each program up from that point. Was hoping there was a
quick way.

--- In vantage@yahoogroups.com <mailto:vantage%40yahoogroups.com> , "Ken
Williams" <ken@...> wrote:
>
> If I understand what you're asking for, just disallow on the top
most
> part of the menu structure, if they don't have access to the
topmost
> folder they can't get to the rest of them.
>
> For example, if I want to disable all menu items under Order
Management,
> I just disallow access to the Order Management folder.
>
> ________________________________
>
> From: vantage@yahoogroups.com <mailto:vantage%40yahoogroups.com>
[mailto:vantage@yahoogroups.com <mailto:vantage%40yahoogroups.com> ] On
Behalf
> Of Michael McWilliams
> Sent: Wednesday, November 28, 2007 8:31 AM
> To: vantage@yahoogroups.com <mailto:vantage%40yahoogroups.com>
> Subject: [Vantage] Disallow all menu and security items
>
>
>
> Is there a way to quickly disallow every item in the menu
structure
> for each user without going through each one and checking disallow
for
> all users?
>
>
>
>
>
>
> [Non-text portions of this message have been removed]
>






[Non-text portions of this message have been removed]