Securing HR tables w/o Proc Lvl from Add-Ins

 1 Replies
 0 Subscribed to this topic
 15 Subscribed to this forum
Sort:
Author
Messages
RMS
New Member
Posts: 2
New Member

    Using LSF 9 Lawson Security:  I would like to secure the BENEFITS table to a subset of employee IDs based on the users allowed process levels.

      I've created a multi-value attribute 'MultiProcLvls' on the users RM schema that contains the process levels the user is allowed to see.  This works great to secure tables that contain Process Level from Add-ins query, but other tables, such as Benefits, only contain Company and Employee. So I'm trying to use the getDBField() function in conjunction with the Employee table to translate the set of allowed process levels into allowed Company-Employee keys.  Here is the rule I've tried on the Benefits table:  

    if (user.attributeContains('MultiProcLvl', getDBField('EMPLOYEE','PROCESS_LEVEL',table.COMPANY,table.EMPLOYEE))) then All-Access else No Access

    but this fails the initial rule evaluation edit with the error: Function getDBField doesn't exist in this scope.    Any thoughts?  Does anyone even grant Add-Ins access to HR/PR users with limited process-level authority?

     

    John Henley
    Posts: 3353
      RMS, I'm moving this topic to the 'S3 Security' forum...
      Thanks for using the LawsonGuru.com forums!
      John