Solution Explorer

Morning...

Is anyone using Solution Explorer instead of One World Explorer?
Security issues?
General comments?

I have a couple of clients using Solution Explorer... the documentation part
of it seems to be a key they like...



Is anyone using Solution Explorer instead of One World Explorer?
Security issues?
General comments?

Boy did YOU open a can of worms! lol

Solution explorer is a "Bolt On" front end to Oneworld and adds complexity
to the OneWorld Security model. In some ways it makes administration work
more difficult and in others it makes using OW easier.

The major enhancement that Solution explorer offers seems to be menu level
security and custom menu setup. You can create "roles" (different from
groups) to secure out menus so that people that should not see certain
things will not see them. It does not replace the Security workbench but
rather works in concert with it. The unfortunate thing is that Solution
Explorer is environment specific, where Security Workbench is not. You use
a single Menu Structure (Task View) but you can customize the access to it
so that only certain roles can see certain menu options in the same view.
Switching between roles allows you to see different menu structures in the
fly ithout having to sign off and back on again.

Essentially when I create a user and group when I use Solution Explorer I
have to:

- Create the Security Group (User Profiles)
- Create the Groups Application Security (Security Workbench)
- Create the User Profile (User Profiles) and assign it to a group.
- Create the User logon to the Data Base (Data Base and User Security)

So far this is the same and using OExplorer.

Then to use Solution Explorer effectively you have to:

- Create a Role (this should correspond to the Security Group for ease of
Admin - best not to use spaces in the name)
- Create Task View or Menu security for the Role
- Assign a role to a user

Security Workbench limits a users ability to run programs/reports, see
data, etc...

Roles limit a users ability to see certain menu options. Fast Path and
Row/Form exits will still allow them to run whatever Security Workbench
allows them to.
Roles have to be promoted to the other env's. Task View Security has to be
copied to the other environments.

Check the KG for potential ESU's required for your Service Pack level.
There was an issue with copying Task Views but not the security wiht them
at some earlier SP levels.

Roles also allow users to back each other up for vacation and such because
a single user can have multiple roles in Solution Explorer whereas their
User Profile can have only one Security Group.

Let's say User A goes on vacation and User B needs to take over User A's
job.

In Security workbench you have to:
- Create a Group C by combining the security for Groups A and B.
- Assign the User B to the new combined group

In Solution Explorer you have to:
- Grant User B the secondary Role

User B can now effectively switch back and forth between the roles on the
fly without having to sign off and back on again and will be able to see
each menu that they need to do either job. Roles can also be set to expire
at a certain time so that when User B is no longer supposed to do the
second job they will automatcially no longer be able to see User A's menu
structure. But you DO have to remember to put them back in their own
Security Group or they will still have the combine Application Security
privilages.

There are pros and cons to Solution Explorer but I've found that my
customers prefer SE over OE. It just takes getting used to from an admin
perspective.

Be sure to lock out "Internet" from any thin clients you have using SE
(just like OE) because as we all know, Internet Browses grant access to
the Hard drive.

I hope this gives you an idea of what SE can do for you.

Regards,
Gerald.







rekblad
<[email protected]> To: Gerald Kastanek/Toronto/IBM@IBMCA
Sent by: cc:
owner-jdelist@jde Subject: Solution Explorer
list.com


08/20/2002 09:50
AM
Please respond to
jdelist





Morning...Is anyone using Solution Explorer instead of One World
Explorer?Security issues?General comments?
Rob Ekblad
www.JDETIPS.com
Xe 17 / AS400
--------------------------
To view this thread, go to:
http://www.jdelist.com/ubb/showthreaded.php?Cat=&Board=OW&Number=40150
+ - - - - - - - - - - - - - - - - - - - - - - - -+
This is the JDEList One World® / XE mailing list/forum.
Archives and information on how to SUBSCRIBE, and
UNSUBSCRIBE can be found on the JDEList Forum at
http://www.JDEList.com

JDEList is not affiliated with JDEdwards®

+ - - - - - - - - - - - - - - - - - - - - - - - -+

Rob, I have used Solutions Explorer at several of my clients. It is much
friendlier to use/configure than the OEXplorer menu system. Security is
still performed from the P00950 application, but once you start to use
solutions explorer you can tell that JDE has much bigger plans for
integrating additional security in the future.

My recommendation would be to use it.

Andy



Is anyone using Solution Explorer instead of One World Explorer?
Security issues?
General comments?






Consultant with clients
at B7331 - Xe
Various Deployment Servers, Citrix and JAS

Thanks to all of you for your response...

My client has the idea that a single user can have several roles, but he imagines them to be "combineable". Let's say there are 2 roles:
Role 1 has access to Task1
Role 2 has access to Task2.
What they want is that 3 users could be setup like this:
User 1 has Role 1 and access to Task1;
User 2 has Role 2 and access to Task2;
User 3 would have Role 1 & 2 & access to both Task1 and Task2 by default -- not "on the fly" by switching between roles -- but by default. Do you think this is possible?

Only if you create Role 3 for User 3.





rekblad
<[email protected]> To: Gerald Kastanek/Toronto/IBM@IBMCA
Sent by: cc:
owner-jdelist@jde Subject: Re: Solution Explorer
list.com


08/21/2002 11:06
AM
Please respond to
jdelist





Thanks to all of you for your response...My client has the idea that a
single user can have several roles, but he imagines them to be
"combineable". Let's say there are 2 roles:Role 1 has access to Task1Role 2
has access to Task2. What they want is that 3 users could be setup like
this:User 1 has Role 1 and access to Task1;User 2 has Role 2 and access to
Task2;User 3 would have Role 1 & 2 & access to both Task1 and Task2 by
default -- not "on the fly" by switching between roles -- but by default.
Do you think this is possible?
Rob Ekblad
www.JDETIPS.com
Xe 17 / AS400
--------------------------
To view this thread, go to:
http://www.jdelist.com/ubb/showthreaded.php?Cat=&Board=OW&Number=40297
+ - - - - - - - - - - - - - - - - - - - - - - - -+
This is the JDEList One World® / XE mailing list/forum.
Archives and information on how to SUBSCRIBE, and
UNSUBSCRIBE can be found on the JDEList Forum at
http://www.JDEList.com

JDEList is not affiliated with JDEdwards®

+ - - - - - - - - - - - - - - - - - - - - - - - -+

We are fairly new to OW, and we are using Solution Explorer. Once you get the hang of it, it is not too bad. You are correct. A user can be in more than one "role". They can switch back & forth from one role to another. We were also told it would be better to start using Solution Explorer (if you are new), otherwise you will have to convert your OW Explorer menus to tasks when OW Explorer is "dropped".

Pro - for users. Favorites tool bar so that you don't have to navigate through the task view to find your favorite options.

Con - support. Menus can be promoted from environment to environment using OMW, with the tasks, you have to copy files/SQL to move changes to different environments.

Con - We are on SP 17.1 and are getting alot of fatal errors with different functions. Doesn't seem to be ready for prime time.

Gerald,

Thanks for your comprehensive reply, that is excellent information.

Much appreciated!

According to JDE, you will be able to simultaneously combine roles, much like WinNT groups, in the future. But for now, the user will have to Apply Role (or switch) between different roles.