Security Advice

Yahoo Archive
1
Use a BPM,

Pre process on the part.Update method.

You can check for the security group and raise an
exception when required

You can control down to the filed that is changed if
required.



Regards,

Stephen



From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf
Of Carey S
Sent: 14 October 2008 17:03
To: vantage@yahoogroups.com
Subject: [Vantage] Security Advice



Hello everyone.
I have a small security situation in Vantage 803.404.

We have had many parts that we had to inactivate to make things work
properly and reliably. Detail not important, but I can not count on
anyone to not make the changes that they themselves think should be
implemented.
I created a security group called PARTS MASTER MANAGERS. Only two of us
are members of this group.

First I tried securing menu maintenance, but this does not work because
of the many ways part master could be accessed.
I tried field security, and wanted to lock certain fields, like part
number and description. This does not work because then a restricted
user putting on an order would not have the ability to access or edit
these fields on the part order.

Finally, I turned to process security and simply restricted the update
method from the part bo and this seems to work fine....all except for
one of the people I specifically want to lock out of changing anything
else in the part master "NEEDS" the ability to change the sales prices
on the fly.

Without turning to anything too complex, like service connect, does
anyone have any suggestions as to the best and easiest way to go about
this?

Thanks
Carey





[Non-text portions of this message have been removed]
2
Hello All

We've just gone live after a long period of testing etc.

I have a question on Bank Reconcilliation: AP is fine and does
everything I would expect. However AR seems very alien in the way you
reconcile any payments received.

Our company reguraly get payments (mostly from Government Bodies) and
do not provide remittance advices and can group many invoices from many
accounts together. It is therefore difficult to reconcile some of
these payments from our bank statement against an invoice(s).

How is everyone else doing this in Vantage? It seems that unless you
know the full details of the payment it's like searching for a needle
in a haystack.
3
Hello everyone.
I have a small security situation in Vantage 803.404.

We have had many parts that we had to inactivate to make things work properly and reliably. Detail not important, but I can not count on anyone to not make the changes that they themselves think should be implemented.
I created a security group called PARTS MASTER MANAGERS. Only two of us are members of this group.

First I tried securing menu maintenance, but this does not work because of the many ways part master could be accessed.
I tried field security, and wanted to lock certain fields, like part number and description. This does not work because then a restricted user putting on an order would not have the ability to access or edit these fields on the part order.

Finally, I turned to process security and simply restricted the update method from the part bo and this seems to work fine....all except for one of the people I specifically want to lock out of changing anything else in the part master "NEEDS" the ability to change the sales prices on the fly.

Without turning to anything too complex, like service connect, does anyone have any suggestions as to the best and easiest way to go about this?

Thanks
Carey
_________________________________________________________________
Get more out of the Web. Learn 10 hidden secrets of Windows Live.
http://windowslive.com/connect/post/jamiethomson.spaces.live.com-Blog-cns!550F681DAD532637!5295.entry?ocid=TXT_TAGLM_WL_domore_092008

[Non-text portions of this message have been removed]