askuodas
Active Member
Dear listers,
We are going through an upgrade from World to EOne 8.11 on an iSeries. The security model is that all BU are closed, and users granted access to the range, or specific BUs needed.
We have an issue with BU Security - specifically within AR in relation to the Balance Sheet business unit for the Debtors Control Account as nominated in the AAIs.
* In World the BU Security is active only on business units entered directly into a transaction. The BU that is defined in the AAIs to post Trade Debtor balances against is not validated by BU Security as it is an automated entry. As such a user does not have to be granted access to the Balance sheet BU, where the Trade Debtors account lives, to be able to create and post AR invoices
* In EOne 8.11, the BU security logic is different. It is now essentially a row and table based matrix. A user must be granted access to the specific BU representing the Balance Sheet in order to raise an invoice. The system checks, via the AAIs, the Trade Debtor BU number and if the user does not have access to the Balance Sheet as nominated in the AAIs, they are not able to enter the invoice.
Raising of AR invoices happens out in the field around the country, so a wide range of users enter invoices. It is preferred that these users do not have access to the balance sheet. Under this configuration in EOne 8.11, these users cannot raise an invoice. In World they could.
Does anyone have any bright ideas as to how this can be resolved? Assume the Balance Sheet containing the trade debtor account must remain off limits.
Kind regards,
Adrian
We are going through an upgrade from World to EOne 8.11 on an iSeries. The security model is that all BU are closed, and users granted access to the range, or specific BUs needed.
We have an issue with BU Security - specifically within AR in relation to the Balance Sheet business unit for the Debtors Control Account as nominated in the AAIs.
* In World the BU Security is active only on business units entered directly into a transaction. The BU that is defined in the AAIs to post Trade Debtor balances against is not validated by BU Security as it is an automated entry. As such a user does not have to be granted access to the Balance sheet BU, where the Trade Debtors account lives, to be able to create and post AR invoices
* In EOne 8.11, the BU security logic is different. It is now essentially a row and table based matrix. A user must be granted access to the specific BU representing the Balance Sheet in order to raise an invoice. The system checks, via the AAIs, the Trade Debtor BU number and if the user does not have access to the Balance Sheet as nominated in the AAIs, they are not able to enter the invoice.
Raising of AR invoices happens out in the field around the country, so a wide range of users enter invoices. It is preferred that these users do not have access to the balance sheet. Under this configuration in EOne 8.11, these users cannot raise an invoice. In World they could.
Does anyone have any bright ideas as to how this can be resolved? Assume the Balance Sheet containing the trade debtor account must remain off limits.
Kind regards,
Adrian
