• Introducing Dark Mode! Switch by clicking on the lightbulb icon next to Search or by clicking on Default style at the bottom left of the page!

Ye old hide Employee info problem

Jack_Crouch

Well Known Member
There have been numerous and lengthy approaches (posted on the list) on how
one can go about security the F0101 "E" employee records.

What it really comes down to is needing row and column security at the same
time. For group ABC, allow the TAX column for "E" rows in F0101. OW
does not allow for this (to my knowledge).

The TAX field is important on F0101 - it holds SSN. If it is blanked out
(we tried this), then you would think that SSN in F060116 would be OK. We
have experienced situations where this configuration will mistakenly blank
out the SSN on the Employee Master file. Not a good thing.

The TAX field is important for other than "E" records and the world needs to
see this (Customer geo codes).

Anyway... I am convinced that the best approach is to modify P01012 and
other applications to hide the SSN under certain conditions. I was
thinking of creating a bogus application that I could use in F00950 security
file. My mod would look to records existing in here for this special app
to determine the behavior of the SSN hiding. This way, security for this
can be controlled from the Security Workbench (like most other security).

I am interested if anyone might have a better approach or caveats against
using the F00950 in such a manner.




AS400 V4R4, B733.2, SP11.3, NT-SQL7 for CO
 
<html><DIV>


Jack</P>


The best approach(for me this meant the one that did the job but involved no development) have come up with so far is to set up employees up in a pre-defined range. Then this range of numbers can besecured in row security to stop certain groups from viewing important information held against the employeee.g. secure range of numbers in Address and Phone Number table (F0115 & F0116).</P>


I'm not sure if this would help your SSN problem though as the data you want to hide is in the same table as information you don't want to hide.</P>


It isn't perfect but was the best way could think of doing it without making development changes.</P>


Regards</P>


John

</P></DIV>
<DIV></DIV>
<DIV></DIV>>From: Jack_Crouch <J.CROUCH@SSSS.COM>
<DIV></DIV>>Reply-To: jdelist@jdelist.com
<DIV></DIV>>To: jdelistml@jdelist.com
<DIV></DIV>>Subject: Ye old hide Employee info problem
<DIV></DIV>>Date: Thu, 15 Feb 2001 07:51:45 -0800 (PST)
<DIV></DIV>>
<DIV></DIV>>There have been numerous and lengthy approaches (posted on the list) on how
<DIV></DIV>>one can go about security the F0101 "E" employee records.
<DIV></DIV>>
<DIV></DIV>>What it really comes down to is needing row and column security at the same
<DIV></DIV>>time. For group ABC, allow the TAX column for "E" rows in F0101. OW
<DIV></DIV>>does not allow for this (to my knowledge).
<DIV></DIV>>
<DIV></DIV>>The TAX field is important on F0101 - it holds SSN. If it is blanked out
<DIV></DIV>>(we tried this), then you would think that SSN in F060116 would be OK. We
<DIV></DIV>>have experienced situations where this configuration will mistakenly blank
<DIV></DIV>>out the SSN on the Employee Master file. Not a good thing.
<DIV></DIV>>
<DIV></DIV>>The TAX field is important for other than "E" records and the world needs to
<DIV></DIV>>see this (Customer geo codes).
<DIV></DIV>>
<DIV></DIV>>Anyway... I am convinced that the best approach is to modify P01012 and
<DIV></DIV>>other applications to hide the SSN under certain conditions. I was
<DIV></DIV>>thinking of creating a bogus application that I could use in F00950 security
<DIV></DIV>>file. My mod would look to records existing in here for this special app
<DIV></DIV>>to determine the behavior of the SSN hiding. This way, security for this
<DIV></DIV>>can be controlled from the Security Workbench (like most other security).
<DIV></DIV>>
<DIV></DIV>>I am interested if anyone might have a better approach or caveats against
<DIV></DIV>>using the F00950 in such a manner.
<DIV></DIV>>
<DIV></DIV>>
<DIV></DIV>>
<DIV></DIV>>
<DIV></DIV>>AS400 V4R4, B733.2, SP11.3, NT-SQL7 for CO
<DIV></DIV>>--------------------------
<DIV></DIV>>To view this thread, visit the JDEList forum at:
<DIV></DIV>>http://198.144.193.139/cgi-bin/wwwthreads/showflat.pl?Cat=0&Board=OW&Number=5678
<DIV></DIV>>*************************************************************
<DIV></DIV>>This is the JDEList One World / XE Mailing List.
<DIV></DIV>>Archives and information on how to SUBSCRIBE, and
<DIV></DIV>>UNSUBSCRIBE can be found at http://www.JDELIST.com
<DIV></DIV>>*************************************************************
<DIV></DIV>>
<DIV></DIV><br clear=all><hr>Get your FREE download of MSN Explorer at http://explorer.msn.com
</p></html>
 
Top