How to get a list of authorized users to transactions ?

[Klingsor]

Hello, in order to prepare an audit on JDE, I am being asked to evaluate how complex it will be to obtain a list of users having access to the following transactions :
- create payment group
- supplier bank account maintenance
- purchase invoice entry

In my view, it shouldn't be complex to construct in Access a query which would sound like :
select * from USERSTABLE
where TRANSACTION='CREATE PAYMENT GROUP'

The problem is that I've never worked on JDE before and I struggle to find a data dictionary, so I don't know if I am actually on the right track.

Ideas anyone ???

Thanks,

 

[John_Dickey]

Well, it is not so easy as you might think. I assume you are on JDE
World. If you are running One World, you are on the wrong list.
Depending on how your JDE security is set up, the access could be by the
users AS/400 user profile name, a JDE group, or fall through to the
default security setting. Not to mention whether or not people can get
to the menus that these options are on. If you want to take a look at
what you are dealing with, look at the JDE action code security for one
of these programs. That should start to tell you how complex this could
be.

John Dickey
Financial Systems Administrator
White-Rodgers, division of Emerson Electric
8100 West Florissant Ave.
P.O. Box 36922
St. Louis, MO 63136-9022
314-553-3067
[email protected]

 

[Hal_McGee]

I created an Access database to get a complete report of all menu's and
dreamwriters with the processing options. Assuming you are using the menu's
as your security control and you have menu travel turned off, you would
have to identify the programs with update ability, then take each users
start menu and from there derive every dreamwriter the user has access to
and then determine if those programs can update the aforementioned data.
You can use JDE's CASE tool but I have found programs that update things
that are not on the CASE tool in the past although I don't remember a
specific example.

Going backwards from the data only tells you which program updated the data
but since programs call programs that call programs.... it is hard to find
the programs that actually initiated the update.

Suffice it to say, it is not on a simple query from Access. I ran out of
steam on a similar project.

Hal McGee
Engineering Data Manager
Group Engineering - Process and Compliance
Seating Products Group
B/E Aerospace
Winston-Salem, NC



John_Dickey
<John.Dickey@Whit
e-Rodgers.com> To
Sent by: [email protected]
jdeworld-bounces@ cc
jdelist.com
Subject
RE: How to get a list of authorized
02/13/2007 02:06 users to transactions ?
PM


Please respond to
JD Edwards® World
<jdeworld@jdelist
.com>






Well, it is not so easy as you might think. I assume you are on JDE
World. If you are running One World, you are on the wrong list.
Depending on how your JDE security is set up, the access could be by the
users AS/400 user profile name, a JDE group, or fall through to the
default security setting. Not to mention whether or not people can get
to the menus that these options are on. If you want to take a look at
what you are dealing with, look at the JDE action code security for one
of these programs. That should start to tell you how complex this could
be.

John Dickey
Financial Systems Administrator
White-Rodgers, division of Emerson Electric
8100 West Florissant Ave.
P.O. Box 36922
St. Louis, MO 63136-9022
314-553-3067
[email protected]

 

[maddy.perez]

Greetings,

In my company we use a tool to make reports to say these things. It is called soxlock by a company called alloutsecurity. I dont know if it is ok for many companies because I am new to JDE but it makes reports with a small price.

Maddy

Innophos, Vera Cruz
JDE 7.3 cum 15

 

[Any]

Hello,

We have soxlock from alloutsecurity and it is good.

CEMEX Company