We have a new position that needs inquiry access to HR11 but only for those employees within the same process level. For example: John Doe is in PLevel 001 - should only be able to see employees in his PLevel=001 Jane Doe is in PLevel 002 - should only be able to see employees in her PLevel=002 Has anyone found a fairly simple way to accomplish this Thanks! -Shari

OK, I have the following code setup in my loadusers.xml script.  For the life of me, I cannot figure out why this works when I don't have the Email tag setup.  If I put in the email bit, it fails.  Can anyone shine a light on this FYI, Agency, UnixID, ProxyUserID WfUser are custom fields and work fine.  I've tested all of them individually.  The only one that fails is email.         od 90' Role='LoganAllAccess' Agency='014' UnixID='bjones' Access='Y' ProxyUserID=' BobJones' WfUser='1...

Need to be able to substite an SSOP identity ... Example have an RMId of pr100rw1, a SSOP User of jsmith (bound to AD), and OS id (Window NT) of localcomputer\xpr100rw1 (local computer account...not AD account!)... would like to change out SSOP User jsmith (AD account) with mjane (also an AD account)  and leave the rest unchanged... an thoughts

I work for a small shop on a Lawson 8.1 apps, 8.1 environment, Unix - AIX,  DB2 applications. We are going thru a SOX audit and the auditors have found several 'issues' with our Lawson procedures. Since my boss and I are the only Lawson Sys. Admins - and there is no program promotion software in place, the current procedures we follow are documenting changes, documenting user testing, submitting change control docs to committee which meets weekly and then I (the developer) move the module into p...

When converting to LSF 9 security how are you attaching Process Levels to users Are you using a custom attribute in RM Our enterprise has two ids (one apps one ess) per user so I there isn't a need for me to create an ESS service for app users.

Is 9.0 Security required for 9.0 apps

I know that a user's security class affects which forms he or she can open in Design Studio. But what exactly grants access to Design Studio itself

I'm confused about a few specific but correlated things on the laua data security listing report:   1) If there is no value in the 'System Code' spot, does that mean that for  every system code the Security Class has access to based on the FormID Report - they have access to for the *same*  'From' and 'To' Company/Process Levels based on that row in said Data Report   2) same type of thought - if there is no value in the 'Product Line' AND 'System Code' does that make the From and To values...

Is there a way to limit someone's access for company and process level at a high level or do we need to modify individually all tables, online programs and batch programs Any assistance is greatly appreciated. Thanks! Elizabeth Ardito Systems Analyst Middlesex Health System

I have a sample output in the following from Lawson LAUA Security profiles:   Security Class User Name ADMIN NT00000131   USER ...

What would the IDA call be to create a shortcut for a few of our staff to monitor their A/P payments in the 9.0 environment  The 8.03 shortcut was: https://servername/servlet/ida_TYP=OV&_OUT=HTML&_PDL=PROD&_SYS=gl&_FN=APVENMAST&_OV=281&_ON=VendorPaidInvoices&_IN=VENSET1&K1=VNDG&K2=vend

In are current Lawson implementation we have give certain users access to wf12 in order to update routing.  In LSF9 it looks like WF12 is gone.  Is there a way to do this in LSF9 without giving the users full access to ProcessFlow Admin Thanks --JayR   --JayR

Are Element Groups simply a set of keys across Lawson tables Is this statment correct - 'even though the column names in some Lawson tables are different they may refer to the same thing' What are some Element Groups commonly used Is this mainly for Data Level Security

After looking at Lawson's ESS and MSS Security Classes in the provided role templates, it appears that these are only for use with EMSS users that do not have access to the search bar as they provide access to many forms and files that many users with the search bar should not have access to. Has anyone any good suggestions on how to approach EMSS on LS9 for users hat have access to the search bar

I am working on how to best build access to our process levels. There are 50 accounts with a range of accounting units underneath as follows Account = 101 Accounting units = 101001 - 101999 Account = 102 Accounting Units = 102001-102999 And so on..... I would like to create a custom attribute for Account of 101, 102, etc... and grant access to the associated accounting units. Being that there are so many accounts, I would like to be able to accomplish this with a rule referencing the cu...

Has anyone got any ideas on how to determine which files and/or systemcodes are required for drill and select access on forms. Currently, the method I am using is to do a drill explorer on the fields with a drill or select available within the security admin tool. How is everyone else doing this It would be nice to determine at least which sysemcodes files are being accessed.   HELP!! Any ideas would be appreciated.

Has anyone implemented 9.0 Apps & Security at the same time

I need to restrict ESS users from using the Search box, as they have access to HR11 to inquire Personal data. Any assistance is greatly appreciated.

How would you secure the SS number field on HR11 form. We are windows, still using Laua on version 9. Any help appreciated

Can anyone offer insight on what exactly FastTrack is

Does anyone know how to remove or secure the 'Related Forms' drop down from forms like AR11.1 Or a way to secure the forms listed I have denied access to the forms listed and the users can still access them via the related forms link.  Any help would be appreciated.

I am attempting to log into are new development lawson ldap server.  I must be missing something.  Does anyone have an example of what this looks like  Here is the ldap information from the install.cfg file. LDAPBINDDN=CN=root,CN=lsfdev01,DC=prod,DC=bcidaho,DC=loc LDAPDATADN=o=lwsnrmdata LDAPHOST=LSFDEVAPP1.some.place.loc LDAPLOCAL=TRUE LDAPOIDARC=1 LDAPPASSWORD=xxxxxxxxxxxxx LDAPPORT=389 LDAPPREFIX=zz LDAPTYPE=ADAM LDAPTYPEGEN=com.lawson.lawrm.ldifgenerators.ActiveDirGenerator LDAP_...

Thanks for reading OS: Unix Apps: 8.0.3 PF: Integrator RM: MS Adam DB: DB2 Is there a way to increase the number of workunits displayed in an inbasket

Using LSF 9 Lawson Security:  I would like to secure the BENEFITS table to a subset of employee IDs based on the users allowed process levels.   I've created a multi-value attribute 'MultiProcLvls' on the users RM schema that contains the process levels the user is allowed to see.  This works great to secure tables that contain Process Level from Add-ins query, but other tables, such as Benefits, only contain Company and Employee. So I'm trying to use the getDBField() function in conjunction wi...

Thanks for reading. I think I know the answer but I wanted to make sure. With 8.0.3 security, if a Change Function Code is given the user is able to perform Change on all form tabs given correct