How to lock-out payroll tables from Crystal reports

system · June 14, 2006, 10:56am

We have good security to prevent access to payroll tables through Vantage.
CorVu also recognizes the encryption of the payroll tables and they can not be accessed.

In Crystal 6, you could not access the payroll tables.
In Crystal 8 you can see ANY data. We thus limit who has Crystal 8.
Now I want to start converting the RB report to Crystal and I need a way to lock out the payroll tables.
We use Vantage 6.1 and are preparing to move to Vantage 8.

Any ideas are appreciate.

BW

--------------------------------------------------
Babette Welch
IT Director
Argonics, Inc.
1110 Wright Street
Marquette MI 49855
906.226.9747 ext 235

[Non-text portions of this message have been removed]

system · June 9, 2006, 1:59pm

Any one know how to prevent someone with Crystal 8 (or higher)
Accessing the Vantage payroll/employee tables?

Running Vantage 6.1

Thanks for all information

BW

--------------------------------------------------
Babette Welch
IT Director
Argonics, Inc.
1110 Wright Street
Marquette MI 49855
906.226.9747 ext 235

[Non-text portions of this message have been removed]

system · June 9, 2006, 2:22pm

Can I assume that you tried it and you can access it?

I thought you can't access anyway because it was encrypted information.

My guess would be not to give them access to the payroll info to begin
with in Vantage.

M. Manasa Reddy
ERP Systems Specialist
Crestview Aerospace Corporation
mmreddy@...
Phone: (850) 682-2746 x272
Cell: (850) 305-0931
Radio: 186*111*3414

________________________________

From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf
Of Babette Welch
Sent: Friday, June 09, 2006 12:58 PM
To: vantage@yahoogroups.com
Subject: [Vantage] How to lock-out payroll tables from Crystal reports

Any one know how to prevent someone with Crystal 8 (or higher)
Accessing the Vantage payroll/employee tables?

Running Vantage 6.1

Thanks for all information

BW

--------------------------------------------------
Babette Welch
IT Director
Argonics, Inc.
1110 Wright Street
Marquette MI 49855
906.226.9747 ext 235

[Non-text portions of this message have been removed]

[Non-text portions of this message have been removed]

system · June 9, 2006, 2:23pm

You can create a different SQL user and not grant them access to the
tables.

I.e. in SQL explorer

CREATE USER 'odbcuser','odbcuser';

COMMIT;

GRANT SELECT ON pub.ABCCode TO odbcuser;

GRANT SELECT ON pub.AlertGroup TO odbcuser;

GRANT SELECT ON pub.AlertLog TO odbcuser;

GRANT SELECT ON pub.AllocPri TO odbcuser;

GRANT SELECT ON pub.AltCenter TO odbcuser;

GRANT SELECT ON pub.APAcct TO odbcuser;

GRANT SELECT ON pub.APAlcDtl TO odbcuser;

GRANT SELECT ON pub.APAlcHed TO odbcuser;

GRANT SELECT ON pub.APChkGrp TO odbcuser;

GRANT SELECT ON pub.APElecPy TO odbcuser;

GRANT SELECT ON pub.APInvDtl TO odbcuser;

GRANT SELECT ON pub.APInvExp TO odbcuser;

GRANT SELECT ON pub.APInvGrp TO odbcuser;

GRANT SELECT ON pub.APInvHed TO odbcuser;

Keep adding until you have all the tables you want. I can send you a
script for almost all of the tables, may just need a few changes.
Contact me off the list.

Todd

________________________________

From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf
Of Babette Welch
Sent: Friday, June 09, 2006 1:58 PM
To: vantage@yahoogroups.com
Subject: [Vantage] How to lock-out payroll tables from Crystal reports

Any one know how to prevent someone with Crystal 8 (or higher)
Accessing the Vantage payroll/employee tables?

Running Vantage 6.1

Thanks for all information

BW

Babette Welch
IT Director
Argonics, Inc.
1110 Wright Street
Marquette MI 49855
906.226.9747 ext 235

[Non-text portions of this message have been removed]

TECT Proprietary & Confidential. This message, along with any
attachments, is intended only for the exclusive use of the
individual or entity to which it is addressed and may contain
information that is privileged, confidential and exempt from
disclosure. If you are not the intended recipient, you are hereby
notified that any dissemination, distribution, or copying of this
message, or any attachment, is strictly prohibited. If you have
received this message in error, please notify the original sender
immediately by return email, or by calling 229-228-2600, and delete
the message, along with any attachments, from your computer.

[Non-text portions of this message have been removed]

system · June 12, 2006, 2:29pm

The main table you will want to exclude is the Payroll Employee Master
table (PREmpMas) that contains pay, SSN and other personal info. But
all the tables having PR* at the beginning of the name are Payroll
tables. We aren't using the PR module so for our setup so for us, the
PREmpMas is the only table that is populated.

And depending on how you have your "LaborRate" field applied, you may
have to look at the EmpBasic table as well. If you have applied the
standard rate in this field, it should be okay to access but if you've
applied actual pay rate, it may need to be restricted. However, the
EmpBasic is a very useful table to relate EmpIoyeeNum found in the
LaborDtl and elsewhere to the employee's Name, Supervisor, etc. So you
don't want to restrict its use unless you absolutely have to.

________________________________

From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf
Of Babette Welch
Sent: Friday, June 09, 2006 1:58 PM
To: vantage@yahoogroups.com
Subject: [Vantage] How to lock-out payroll tables from Crystal reports

Any one know how to prevent someone with Crystal 8 (or higher)
Accessing the Vantage payroll/employee tables?

Running Vantage 6.1

Thanks for all information

BW

--------------------------------------------------
Babette Welch
IT Director
Argonics, Inc.
1110 Wright Street
Marquette MI 49855
906.226.9747 ext 235

[Non-text portions of this message have been removed]