Who's On?

	Membership:
	Latest: Saef
	Past 24 Hours: 0
	Prev. 24 Hours: 0
	Overall: 5226

	People Online:
	Visitors: 479
	Members: 0
	Total: 479

Name	Points
Greg Moeller	4184
David Williams	3349
JonA	3291
Kat V	2984
Woozy	1973
Jimmy Chiu	1883
Kwane McNeal	1437
Ragu Raghavan	1372
Roger French	1315
mark.cook	1244

PortalBookmarkRole Missing

8 Replies

0 Subscribed to this topic

15 Subscribed to this forum

Sort:

Author

Messages

Ellen Melton

Advanced Member

Posts: 28

12/14/2007 5:45 PM

In the Lawson Administration Resources and Security Guide (page 242), one of the Lawson-delievered roles listed is PortalBookmarkRole. In our installation, that role was not delivered; instead, we have a PortalBookmarkAdminRole. In a recent LIS inquiry to Lawson about this, they said the guide was a typo.

I was wondering if any other installations actually had the PortalBookmarkRole delivered.

What concerns me is the "Admin" piece of the role title we have. I want to make sure the role doesn't give the enduser more access than what they need. Lawson couldn't answer that question for me.

John Henley

Posts: 3353

12/17/2007 6:38 PM

Hi Ellen,
I have also noticed that role to be missing, and have just created it. It needs access to LOGAN, LO system code, LO15.1, LOBKMARK, and LOUSRBKOPT.

Ellen Melton

Advanced Member

Posts: 28

12/17/2007 7:21 PM

So does the delivered, PortalBookmarkAdminRole (which is not documented as delivered), come with more access than what you created? Based on what LIS told me, the manual was a typo on this and it should have been documented as "PortalBookmarkAdminRole" all along - as the delivered role.

John Henley

Posts: 3353

12/17/2007 7:49 PM

The delivered role, PortalBookmarkAdminRole, grants access to more tables and forms in LOGAN. Using the PortalBookmarkAdminRole probably is 90% safe, but for average end users not using Design Studio, and not administering anything, the additional tables and forms are not needed.

Ellen Melton

Advanced Member

Posts: 28

12/17/2007 8:06 PM

And just think - LIS told me there was no difference. So if I just create a PortalBookmarkRole with just the things you mentioned in the eariler post, than that is all the basic end user will need? And if I have someone, like a developer, that uses Design Studio, then they will need the AdminRole? or is it anyone that is a Portal Administrator? It would be nice if Lawson gave you a full listing of what each delivered role should have so that I could compare!!!

John Henley

Posts: 3353

12/17/2007 9:34 PM

Design Studio developers can use the Admin role if you want. Or you can create an additional role for them that includes RD69 and the SIRDXMIDX table.

The best way to see the Lawson-delivered roles is to assign them to yourself, and then run the User Security Report. It will show all the secured objects, and which role grants them.

Ellen Melton

Advanced Member

Posts: 28

12/18/2007 8:10 PM

Thanks for the feedback. I assigned the PortalBookmarkAdminRole to myself and ran the security report. Wouldn't you know it - no security rules - NOTHING. The PortalBookmark security class is the only thing assigned to the role and there are no security rules associated with the security class. What a mess. I'm assuming, that as delivered, there should have been rules already setup. Just one more thing that got messed up in our install. I'm sending this up to our PM to get some eyes on. Makes me wonder if the other delivered roles are OK. Who knows!!

John Henley

Posts: 3353

12/18/2007 8:35 PM

When you ran the security report, make sure you selected the correct profile (LGN) on the left hand-side...

Ellen Melton

Advanced Member

Posts: 28

12/19/2007 1:20 PM

I did. Just to be sure, I selected each profile individually. Here is what I got in my report for LGN profile

> User Security Summary:
Role Profile/Security Class Object Info Rule
PortalBookmarkAdminRole LGN/PortalBookmark none