Exit Security SOS

Is there any way to generate a comprehensive listing of programs that are invoked from an interactive application’s exit bar?

I work for a biopharmaceutical company that's regulated by the FDA which means security for our ERP system needs to be thoroughly controlled and documented. As part of this, I’m required to identify any exit bar security granted through interactive applications. For example, that a user can invoke P41026 (Location Revisions) from P41026 (Item Branch) using the exit bar. Unfortunately, I’ve found out that JD Edwards comes up woefully short regarding this.

I can manually view exit security for any interactive application using the security workbench (P00950 - Exit Security). But that only shows the exit name without any program ID. I need the exit program’s ID to identify any conflicts it may have against the user’s straight application security for that same program. In addition to this shortcoming, the security exit names are frequently inconsistent with the exit names displayed in the applications exit bar. To make matters even worse, some of the exits displayed don't even appear in the application exit bar!

I've called JDE on the issue and they stated that there's no cross reference function that covers the exit programs. They informed me that the Security Workbench extracts the exit security information during its read operation in real time. No table is referenced.

The JDE Tech did put in a SAR request on my behalf, but alas, it was quickly rejected as an unnecessary enhancement.

This all basically means that I'd have to manually go to each program one-by-one and export any exit security to Excel, go back into each interactive application and invoke each exit identified in order to get the program ID, and then create my own cross reference for the FDA. The sun will burn out before I complete this!

Any ideas?

Hi
What sort of secuity model do you have? If you use a "Closed unless Open"
approach then the users wont be able to run any applications that they
arent allowed to. Thats the theory anyway and it can be a lot of work.
I would consider this instead of trying to identify every exit bar option
in every screen but this depends on your company.

Thanks
Kieran




Is there any way to generate a comprehensive listing of programs that are
invoked from an interactive application's exit bar?

I work for a biopharmaceutical company that's regulated by the FDA which
means security for our ERP system needs to be thoroughly controlled and
documented. As part of this, I'm required to identify any exit bar
security granted through interactive applications. For example, that a
user can invoke P41026 (Location Revisions) from P41026 (Item Branch) using
the exit bar. Unfortunately, I've found out that JD Edwards comes up
woefully short regarding this.

I can manually view exit security for any interactive application using the
security workbench (P00950 - Exit Security). But that only shows the exit
name without any program ID. I need the exit program's ID to identify any
conflicts it may have against the user's straight application security for
that same program. In addition to this shortcoming, the security exit
names are frequently inco!
nsistent with the exit names displayed in the applications exit bar. To
make matters even worse, some of the exits displayed don't even appear in
the application exit bar!

I've called JDE on the issue and they stated that there's no cross
reference function that covers the exit programs. They informed me that
the Security Workbench extracts the exit security information during its
read operation in real time. No table is referenced.

The JDE Tech did put in a SAR request on my behalf, but alas, it was
quickly rejected as an unnecessary enhancement.

This all basically means that I'd have to manually go to each program
one-by-one and export any exit security to Excel, go back into each
interactive application and invoke each exit identified in order to get the
program ID, and then create my own cross reference for the FDA. The sun
will burn out before I complete this!

Any ideas?
--------------------------
http://www.jdelist.com/ubb/showthreaded.php?Cat=&Board=OW&Number=32900
+ - - - - - - - - - - - - - - - - - - - - - - - -+
This is the JDEList One World® / XE mailing list / forum.
Archives and information on how to SUBSCRIBE, and
UNSUBSCRIBE can be found on the JDEList Forum at
http://www.JDEList.com

JDEList is not affiliated with JDEdwards®

+ - - - - - - - - - - - - - - - - - - - - - - - -+



CONFIDENTIALITY : This e-mail and any attachments are confidential and may be
privileged. If you are not a named recipient, please notify the sender
immediately and do not disclose the contents to another person, use it for any
purpose or store or copy the information in any medium.

We used two approaches to this.

1) In Security Workbench, turn off access to all programs, then grant back
as needed, via *PUBLIC *ALL = NO.

2) Delegate to somebody (I got the assignment here) to go to each program on
the menus and go through all the exits and see what they are and see if user
group X needs that exit (a user with a good overview can do this) and give
them the exits they need via Security Workbench.

Also need to include access to called-in-the-background programs like some
of P98xxxx group, etc.

We actually got this done. We have 6 OW modules. When we turned security on
we had to change security for about 15 programs. Was workable. It took me
100 hours to look at and decide security for all programs and exits for each
user group and record it in an Excel sheet, which the programmer keyed to
Security Workbench. See our security setup in the downloads section of
JDElist web site.

If your management will not support finding the time to do this, show them
my spreadsheet. Others have done the same kind of setup.

Dave Mallory Denver Water OW 7332

Thanks folks for the prompt replies!

It would appear that there's no easy way to extract the information that I'm looking for. Open vs. closed security isn't the real issue that I'm faced with; it's the documentation of the exit applications - mainly the programs and forms that are invoked (beyond JDE's anemic test descriptions).

P00950 (Security Workbench) does create an entry (type 6) for every exit security granted for any user/group - but again it's only a text description. It's unfortunate that JDE didn't go a step further and tag the actual program name and form for the exit.

Enough whining, time to suck it up and manually get this done.

Thanks again!