Hi all!! Is there an easy way to identify fields/tables EVERYWHERE that pay-related information is stored at -Greg

I am attempting to run the ldapbind on a system and no matter what the credentials/parameters, the error 'java.lang.IndexOutOfBoundsException' is being generated.  The environment is 9.0.1.5 and is patched current today.  Running on AIX with a separate ADAM server.  Anyone seen this or do I have to dig through the code

Is RM security (LSF9) embedded in the Lawson Applicaiton Database and can it be accessed via SQL, like other application tables

After a user submits a General ledger report, they are able to view it while in the print queue. What particular files do they need access to in order for them to drill around the report while it is still in the print queue.

I want to lockdown the Reports for Employees in certain process levels, where Employee is selected with parameter for Process Level is blank using LSF9. I can restrict when selected with Process Level parm.  I have tried the Process Level elementgroup rule and (isElementGrpAccessible('PROCLEVEL','','PR',Co_Value,ProcLvl_value), with out success. Any suggestions greatly appreciated.

I have been playing with some ideas for alternate authentication methods when bound to a corporate LDAP.  I have tried a few things with the SSOP_BIND identity and not really made any progress. How does Lawson use the SSOP_BIND identity for users  Why can you put a DN and password in it if the login for a user is not altered If any of you GURUs out there have any insight I would really appreciate it.

We are having an issue with out of memory errors from the Lawson Security module on Websphere. As we are increasing activity with the security implementation, the issue is causing the application server JVM to crash. Updates to user RM records are quick, but simple changes to security, such as adding 1 class to a role, is taking about 30 seconds. Adding several classes to a role can take up to 5 minutes or produce a timeout. Our ADAM server was spiking to 100 CPU utilization during updates ...

How can I move users from one server (Production environment) to another server (Development environment)

After I copied LS security from Production to Development, I found out I have the security roles but I don't see any security classes with the roles. Do I need to manually assign the classes to the roles in Development If there is a command to copy the security roles, please show me the command and syntax. Thanks.

Please excuse my ignorance as I am new to Lawson and self-taught. I am the security admin for our ERP system. I have been asked to give access to a job that has been created through jobdef. My understanding is, to give access of others you would need to copy this job to these users or give them access to the password of the current user. Is there also a way to give them access through USERGRPDEF Are there other security concerns when dealing with jobs created in jobdef I am assumin...

I am creating a new ESS security class since the lawson delivered ESS templates don't work. I have assigned the rules according to the Employee Self-Service Technical documentation. I keep getting this error when I do a pay check inquiry and here is the log from fiddler: Caused by: com.lawson.lawsec.author.runtime.LawsonSecurityException:Exception while checking security on token EMPLOYEE for user . Message: org.mozilla.javascript.WrappedException: Wrapped com.lawson.lawsec.RulesEngine.Lawson...

We run Lawson Security 9.0, Environment 9.0.0.7 and Apps 9.0/MSP5 on a Windows box and use ADAM. But, we are not LDAP bound. Including ESS-only users, we have about 4000-4500 users. We get several calls/emails regarding lost or forgotten user ids or passwords daily. Our current process is basically to simply reset the passwords when this happens. Can anyone provide direction/instructions on how we can simply pull the information out of LDAP using Softerra LDAP Browser 6.2 so that we can si...

We are in the final preparations for migrating from LAUA security to LSF security and have run into the following problem/error for viewing work unit details in an approver inbasket ... 'Lawson security users not supported in dme.exe'. The error is related to the scripting in the Display Exec 'jobreq.htm' file. Has anyone run into this problem and resolved successfully Lawson's article 5103245 details the issue but doesn't offer a resolution. Any assistance is appreciated! Thanks.

For batch programs that have a Report-only mode and an Update mode (MM180, for example), is there a way using Lawson Security to restrict users to using only the Report mode These users still need to change the other parameters, submit the job and view the report, but we'd like to lock down the Report/Update flag.

We have set up (in Schema Editor) a multi-valued variable. We want to restrict drill access and essentially deny access to any that don't have a corresponding value. The problem is this: When we reference the variable and do a compare, the system only restricts based on the first number in the list. I tried referencing it as if it were an array (with a value in paranthesis representing the index order), but that didn't work. If we had 20 different values in there, how do I get my rule t...

We have just upgraded to ESP5 Now when users go to Form AP10.1 they see new buttons on the screen. Customer(AP10.4), Approval(AP10.7), Xref Vendors(AP15.1) Users do not have access to these forms that the buttons are pointing to. Previous to this we were on ESP3. I thought that if users did not have specific access to these forms the buttons would not show up on AP10.1 Did this change in ESP4 or ESP5 How do I prevent the users from seeing these buttons now

In Lawson Security I want to run a report to see what access of forms, security classes and roles each user has, and import the report into a database. How So far I have found only Role-Security Class Report when I select Report Maintenance in LS but the report only shows classes and roles relationship but does not include the users. Any other options, e.g. using Crystal Report Appreciate any feedback/information. Thanks.

I'm securing activities. The logic I am using follows: 1. Check to make sure that ACACTIVITY.VAR_LEVELS isn't blank. If blank ('') then NO ACCESS...Else 2. Look at a user attribute for company, it matches positions wxyz in the VAR_LEVELS Grant All. 3. Look at another user attribute, compare it against a structure set up in RM (using getStructNodeAbove) to look for a unique code, and if that name or code matches what is in the user attribute GRANT ALL. 4. Otherwise, Grant NONE. ...

Did anyone else have issues with rules created under the DTO section of a form after upgrading to ESP5 All of the sudden users were getting security violations due to the DTO security not being evaluated correctly. Lawson has opened JT135185 to create a fix.

Hi, thank you for reading. If i have a function code and I want to only allow say Change and Delete but not back out (as in the case of AC45.1) can I restrict to that level I've tried specifying it when creating the rule, at the unconditional access and am not having any luck. Is it pretty much you either have access to it or you don't Thanks again

I am creating Security and have found that if I need conditions or unconditional features in the security I have to set this up for each form individually. This will take hours to configure one group. Anyone have shortcuts to setup security rules

I recently added a new form (PR270) to an existing class. The form contains rules on form, company, department and employees. All the rules appear to add correctly, but when I deselected or reselect company from the edit view screen, an entirely different rule(from the same class) pops-up in the edit window. When tested through portal, the rule works. The IOS log shows no errors. I've gone back and validated all the rules in the class and have rebuilt the entire class(on DEV in 2 PL’s and al...

This issue is within the forms security. If I try to edit a rule on a form or create a new rule on a form everything works fine I see the message: Data Initialization Complete But whenever trying to create a new rule or edit a rule in the DTO section of a form I get the following error: I/O Error, Initialization data was not retrieved from the server. I am running 9.0.1.5.411 This is leaving a huge security hole in my system if these rules are not being read by the software.

We have implemented LSF9. I'm working on Help Desk procedures for portal password resets. I'm told the only option is the Lawson Security Administrator. I'd rather not have to install that on the Help Desk PCs. I'd much rather create a web or shell script but I'm told it can't be done. I've thought about writing my own web to talk to LDAP following the USERATTS script and the PWCHANGE design. Has anyone else faced this sort of thing

Not sure if posting in the right forum. My organization is implementing ESS/MSS and plans to open up Lawson access to outside Internet with SSL in place. Please share with me any info you have on the process to setup and any problems or red flags to look for. Thanks.