Information Systems:Extension User Security - Revision history

Jeremym at 23:50, 16 December 2021

2021-12-16T23:50:29Z

Norwinu: /* Table-based authorities */

2018-02-06T00:31:55Z

Table-based authorities

Norwinu: /* Table-based authorities */

2018-02-06T00:30:11Z

Table-based authorities

Norwinu at 00:28, 6 February 2018

2018-02-06T00:28:07Z

Darrenf at 19:03, 5 October 2016

2016-10-05T19:03:46Z

Norwinu at 19:11, 24 June 2016

2016-06-24T19:11:14Z

Norwinu: /* Grant user table authority */

2016-06-24T19:03:37Z

Grant user table authority

Norwinu at 19:02, 24 June 2016

2016-06-24T19:02:16Z

Norwinu at 19:01, 24 June 2016

2016-06-24T19:01:33Z

Norwinu: /* Give Table Authority */

2016-06-24T19:00:13Z

Give Table Authority

@@ Line 453: / Line 453: @@
 ==Table-based authorities==
-Another way security is implemented is through permission tables. There are tables that correlate to a specific action e.g. '''SOSPUSERS''' correlates to 'Users that can create order type SP'. Authorities are thus set by defining users/flags in these tables.
+Another way security is implemented is through permission tables. There are tables that correlate to a specific action e.g. '''SOSPUSERS''' correlates to 'Users that can create order type SP'; '''PROMODELET''' correlates to 'Users who may delete (SP) promo sales orders'.  Authorities are thus set by defining users/flags in these tables.
 To see/maintain these tables:
@@ Line 464: / Line 464: @@
  '''-[[User:Norwinu|norwizzle]] ([[User talk:Norwinu|talk]])'''
 [[Category: IBM i Security]]

@@ Line 461: / Line 461: @@
 # Use option 5 to display elements, and add the ''record'' (F6), using the current entries as a guide for what needs to be entered (mostly just their username and a 'Y' for 'Yes'.
- It is important to note that despite these tables being part of Unity Extension security, some ASW programs/tasks/functions have been modified to consult these tables to enforce permissions that could not be enforced through ASW's own security. The best way to troubleshoot this (and ASW error messages in general), is to determine the program that is presenting the error message, and do a WRKOBJ ''PROGRAMNAME'' to determine the library. It may be in the library of modified ASW programs (XX2480BP).
+ It is important to note that despite these tables being part of Unity Extension security, some ASW programs/tasks/functions have been modified to consult these tables to enforce permissions that could not be enforced through ASW's own security. The best way to troubleshoot this (and ASW error messages in general), is to determine the program that is presenting the error message, and do a WRKOBJ ''PROGRAMNAME'' to determine the library. It may be in the library of modified ASW programs (XX2480BP). A good example of this is DMR302, which is the program to delete sales orders. For order type 'WP', the customized program checks PROMODELET is checked to see if the user is allowed to perform the action.
  '''-[[User:Norwinu|norwizzle]] ([[User talk:Norwinu|talk]])'''

@@ Line 461: / Line 461: @@
 # Use option 5 to display elements, and add the ''record'' (F6), using the current entries as a guide for what needs to be entered (mostly just their username and a 'Y' for 'Yes'.
- It is important to note that despite these tables being part of Unity Extension security, some ASW programs/tasks/functions have been modified to consult these tables to enforce permissions that could not be enforced through
+ It is important to note that despite these tables being part of Unity Extension security, some ASW programs/tasks/functions have been modified to consult these tables to enforce permissions that could not be enforced through ASW's own security. The best way to troubleshoot this (and ASW error messages in general), is to determine the program that is presenting the error message, and do a WRKOBJ ''PROGRAMNAME'' to determine the library. It may be in the library of modified ASW programs (XX2480BP).
 [[Category: IBM i Security]]

@@ Line 1: / Line 1: @@
 It is set up by individual user, but can be copied from an existing person doing the same, or similar, job.
@@ Line 447: / Line 451: @@
 Page down until you see the program you are looking for (they are listed in alphabetic order).  Press F12.  The current user can do everything but ‘add’ and ‘purge’.  To give them purge authority, change the ‘*’ to ‘1’, then press enter and F12.
-==Table authorities (Extensions tables)==
+==Table-based authorities==
 # On a green screen, use menu option 7 - UWD Tables Menu.
-# Use option 1 - UX Extension Tables (I believe this is the only one used).
+# Use option 1 - UX Extension Tables.
 # Use option 5 to display elements, and add the ''record'' (F6), using the current entries as a guide for what needs to be entered (mostly just their username and a 'Y' for 'Yes'.
 [[Category: IBM i Security]]

@@ Line 456: / Line 456: @@
 ===Modifying table security===
-If a user encounters an authority error in ASW, the way to determine if it's an extension table authority is to read the error message. Press F1 or in ASW GUI, click the question mark at the bottom of the window. A table authority issue might produce an error such as: ''You must be flagged in table UX SOSPUSERS to ....''. Another indicator is if they get an error after trying to enter a certain value (field check). Fix the error by:
+If a user encounters an authority error in ASW, the way to determine if it's an extension table authority is to read the error message. Press F1 or in ASW GUI, click the question mark at the bottom of the window. A table authority issue might produce an error such as: ''You must be flagged in table UX SOSPUSERS to place a special order....''. Another indicator is if they get an error after trying to enter a certain value (field check). Fix the error by:
 # On a green screen, use menu option 7 - UWD Tables Menu.

@@ Line 447: / Line 447: @@
 Page down until you see the program you are looking for (they are listed in alphabetic order).  Press F12.  The current user can do everything but ‘add’ and ‘purge’.  To give them purge authority, change the ‘*’ to ‘1’, then press enter and F12.
-==Granting a user Extensions table authorities==
+==Table authorities (Extensions tables)==
 ===Overview===
 '''Note: This section was written after troubleshooting a particular problem and thus is based on inferences/theories i.e. knowledge has not been validated.'''
-It seems that Extension security was developed to secure not only menu access and functions, but also table codes (i.e. ability to use a particular value in certain fields). For example, sales and purchase order types are maintained in tables so that only particular values can be used during data entry (SO, SP, MO etc.). The ability to use a particular value (like SP) doesn't fall under a menu authority (ie. you can access the menu 'Create Sales Order'), nor does it fall under functional authority (entering SP is not itself a function). Thus these types of authorities are maintained in their own tables (yes, tables to maintain authority to use tables).
+It seems that Extensions security was developed to secure not only menu access and functions, but also table codes (i.e. ability to use a particular value in a certain field). For example, sales and purchase order types are maintained as codes in tables so that only particular values can be used during sales/purchase entry (SO, SP, MO etc.). The ability to use a particular value (like SP) doesn't fall under a menu authority (ie. you can access the menu 'Create Sales Order'), nor does it fall under functional authority (entering SP is not itself a program function). Thus these types of authorities are maintained in their own tables (yes, the use of tables to maintain authorities for using tables - confusing!).
 ===Modifying table security===
-If a user encounters an authority error in ASW, the way to determine if it's an extension table authority is to read the error message. Press F1 or in ASW GUI, click the question mark at the bottom of the window. A table authority issue might produce an error such as: ''You must be flagged in table UX SOSPUSERS to ....''. Fix the error by:
+If a user encounters an authority error in ASW, the way to determine if it's an extension table authority is to read the error message. Press F1 or in ASW GUI, click the question mark at the bottom of the window. A table authority issue might produce an error such as: ''You must be flagged in table UX SOSPUSERS to ....''. Another indicator is if they get an error after trying to enter a certain value (field check). Fix the error by:
 # On a green screen, use menu option 7 - UWD Tables Menu.
 # Use option 1 - UX Extension Tables (I believe this is the only one used).
 # Position to the table referred to in the error message by searching under 'Start display at' (for some reason, typing in the 'Search for' field didn't bring it up).
-# Use option 5 to display elements, and add the ''record'', using the current entries as a guide.
+# Use option 5 to display elements, and add the ''record'' (F6), using the current entries as a guide for what needs to be entered (mostly just their username and a 'Y' for 'Yes'.
 [[Category: IBM i Security]]

← Older revision		Revision as of 19:02, 24 June 2016
Line 236:		Line 236:
	Press F19 (upper shift F7) to grant all the missing authorities. Answer ‘Y’ to the warning, and press enter.		Press F19 (upper shift F7) to grant all the missing authorities. Answer ‘Y’ to the warning, and press enter.

		+	==Granting additional authority==
−	==Give User Additional Authority==

	'''Menu Authority'''		'''Menu Authority'''

@@ Line 62: / Line 62: @@
 Fill in these fields, and press enter.  If 'Show Cmd' is yes, the line above 'Option' and 'GO TO MENU' on the menu, will be a command line.
-===Give Authority to Menus===
+===Granting user authority to menus===
 Position to the user just added by keying their last name in ‘partial name’, and pressing enter.
@@ Line 152: / Line 152: @@
            F10=Copy by User       F12=Previous
-===Give Functional Authority===
+===Granting functional authorities===
 Go back to the list of users.
@@ Line 447: / Line 447: @@
 Page down until you see the program you are looking for (they are listed in alphabetic order).  Press F12.  The current user can do everything but ‘add’ and ‘purge’.  To give them purge authority, change the ‘*’ to ‘1’, then press enter and F12.
-==Grant user a table authority==
+==Grant user table authority==
 ===Overview===

← Older revision		Revision as of 19:00, 24 June 2016
Line 447:		Line 447:
	Page down until you see the program you are looking for (they are listed in alphabetic order). Press F12. The current user can do everything but ‘add’ and ‘purge’. To give them purge authority, change the ‘*’ to ‘1’, then press enter and F12.		Page down until you see the program you are looking for (they are listed in alphabetic order). Press F12. The current user can do everything but ‘add’ and ‘purge’. To give them purge authority, change the ‘*’ to ‘1’, then press enter and F12.

		+	==Grant user a table authority==
−	==Give Table Authority==

	===Overview===		===Overview===