Baanboard.com

Go Back   Baanboard.com > Forum > Baan Quick Support: Functional & Technical > Tools Administration & Installation

User login

Frontpage Sponsor

Main

Poll
How big is your Baan-DB (just Data AND Indexes)
0 - 200 GB
18%
200 - 500 GB
29%
500 - 800 GB
3%
800 - 1200 GB
8%
1200 - 1500 GB
8%
1500 - 2000 GB
12%
> 2000 GB
22%
Total votes: 76

Baanboard at LinkedIn


Reference Content

Reply
 
Thread Tools Display Modes
  #1  
Old 12th March 2002, 18:59
Khushro Khushro is offline
Junior Member
 
Join Date: Mar 2002
Location: Scottsdale
Posts: 13
Khushro is on a distinguished road
Baan: BaanIVc4,Vc - DB: Informix,Oracle - OS: Unix, AIX
How can I grant permission to a user to use a session in one particular company only?

Assuming a user has permissions to access companies 100,101 and 102, is it possible to allow the user to use a particular session in any one of these companies and not in the others?

As an example, I want the user to use tdsls0101m000 session only in company 100 and not in 101 and 102.

Revoking authorizations for the tables being accessed by the session in companies 101 and 102 would mean other sessions accessing the same tables in companies 101 and 102 would also not function!

Any suggestions?
Reply With Quote
  #2  
Old 12th March 2002, 20:57
naabi0 naabi0 is offline
Member
 
Join Date: Sep 2001
Location: Alabama
Posts: 81
naabi0 is on a distinguished road
In Maintain Table Authorizations by Table, you can restrict a user's access to table ttdsls030 by company.
Reply With Quote
  #3  
Old 12th March 2002, 21:41
NPRao's Avatar
NPRao NPRao is offline
Guru
 
Join Date: Aug 2001
Location: Pacific NW, USA
Posts: 3,104
NPRao will become famous soon enough
Baan: Baan 4-5,5.2(Reger),LN-6.1,Infor LN-10.x - DB: Oracle,MS-SQL - OS: HPUX, Linux, Windows
Hi Khusrao,

I dont know if you are using the authorization templates for the end users and keeping them as normal users.

Try to use the session, ttams3133m000 - Session Authorizations by Company.
__________________
The art of perfection does not lie in doing extraordinary things but, doing ordinary things extraordinarily well. [-N. Prashanth Rao]
How To Ask Questions The Smart Way,BaaNBoard,NPRao
Reply With Quote
  #4  
Old 12th March 2002, 21:48
Khushro Khushro is offline
Junior Member
 
Join Date: Mar 2002
Location: Scottsdale
Posts: 13
Khushro is on a distinguished road
Baan: BaanIVc4,Vc - DB: Informix,Oracle - OS: Unix, AIX
Guys,

I apologize for not mentioning this earlier - I am on Baan IV c3.

Hence, there is no session called ttams3133m000 - and secondly, as I mentioned in my first post, revoking authorizations on a table for company 102 and 103 would mean that other sessions in these companies for which the user is authorized but which use this table would not be able to show their complete data as well!!

Any other thoughts?
Reply With Quote
  #5  
Old 12th March 2002, 21:52
naabi0 naabi0 is offline
Member
 
Join Date: Sep 2001
Location: Alabama
Posts: 81
naabi0 is on a distinguished road
Read only wouldn't work?
Reply With Quote
  #6  
Old 13th March 2002, 18:46
Francesco's Avatar
Francesco Francesco is offline
Guru
 
Join Date: Aug 2001
Location: Antwerp, BE
Posts: 729
Francesco is on a distinguished road
Baan: 5b - DB: Oracle - OS: Solaris
Have you tried messing around with the fd6.1 file?

I wouldn't really recommend this approach but if you really, really realllllllly want to restrict users on a session level without available Baan functionality then this is the only method I can think of.
__________________
Cheers,

Francesco
..............................................................

Admiral Business Solutions | My World | Baan Board | IT Happens!

"If everyone is thinking alike, then somebody isn't thinking" -- George Patton
"It's easy to cry 'bug' when the truth is that you've got a complex system and sometimes it takes a while to get all the components to co-exist peacefully." -- Doug Vargas
Reply With Quote
  #7  
Old 14th March 2002, 17:34
Khushro Khushro is offline
Junior Member
 
Join Date: Mar 2002
Location: Scottsdale
Posts: 13
Khushro is on a distinguished road
Baan: BaanIVc4,Vc - DB: Informix,Oracle - OS: Unix, AIX
Francesco,

There is no way you can do this even thro fd6.1 as far as I can see....fd6.1 merely provides the derivation path of the VRCs for a particular package and package combination. Could you be slightly more explicit in explaining how it can be done thro fd6.1? If I have 3 companies linked to the same package combination, then the components of a particular session will point to the same VRC - there is nothing I can manipulate in fd6.1 on a company basis
Reply With Quote
Sponsored Links
  #8  
Old 15th March 2002, 14:55
i96nds's Avatar
i96nds i96nds is offline
Member
 
Join Date: Dec 2001
Location: Bucharest, Romania
Posts: 87
i96nds is on a distinguished road
Baan: Baan IV c4 - DB: Oracle 9i, MS SQL 2000 - OS: 2003 and AIX5L
Too much...

Hi Khusrao,

It is no use to work so much for this matter. Since what you want cannot be achieved very easily, I think you should have different Baan Users for the same end-user, depending on the company he uses. You can use the session "Copy auth. between users", so it is not difficult to set the authorizations.

It is not an elegant solution, but it always works.
__________________
Stefan Ninu
-------------------------
P.S. By sending this message NO TREE had to die, NO PAPER was wasted and THE AIR was not polluted!!!
...only a few electrons where temporarely inconvenienced in the process!
Reply With Quote
  #9  
Old 15th March 2002, 17:32
Khushro Khushro is offline
Junior Member
 
Join Date: Mar 2002
Location: Scottsdale
Posts: 13
Khushro is on a distinguished road
Baan: BaanIVc4,Vc - DB: Informix,Oracle - OS: Unix, AIX
Thread closed

i96nds,

The whole purpose of the exercise was to find if there was an easier way of doing this in Baan IV. Obviously there isn't - and your subject sums it up well...I had done it the way you proposed already, but just wanted to know if there was a better solution for it in Baan IV as there is in Baan V.

Thank you for all your responses...I think we can consider this thread closed now.
Reply With Quote
  #10  
Old 21st March 2002, 00:12
Francesco's Avatar
Francesco Francesco is offline
Guru
 
Join Date: Aug 2001
Location: Antwerp, BE
Posts: 729
Francesco is on a distinguished road
Baan: 5b - DB: Oracle - OS: Solaris
Sorry for my late response. I have been tied up (without whips or leather involved) and even though this thread was 'closed', I would still like to explain my initial intent that (although ugly as ...something that's really, really ugly) should still work..._unless_ BaanIV uses fd6.1 different than BaanV uses fd6.2

A normal line in fd6.2 (sticking to what I know now), would look something like:
rtd:/opt/apps/baan/5.0b/application/tdB50o_b_uat:/opt/apps/baan/5.0b/application/tdB50o_b_prod:${BSE}/application/tdB50U_b_stn
d:${BSE}/application/tdB50_b

So yes, it gives you the derivation path for, in this case, all reports in the distribution module.
However, by adding named users, separated by comma's and in between accolades at the beginning of a line, you can direct Baan to look for objects in a different place...for certain users only.

the line(s) would then look like:
{user1, user2}rtd:/opt/apps/baan/gotcha/rtdsls:/opt/apps/baan/5.0b/application/tdB50o_b_uat:/opt/apps/baan/5.0b/application/tdB50o_b_prod:${BSE}/application/tdB50U_b_stnd:${BSE}/application/tdB50_b

rtd:/opt/apps/baan/5.0b/application/tdB50o_b_uat:/opt/apps/baan/5.0b/application/tdB50o_b_prod:${BSE}/application/tdB50U_b_stnd:${BSE}/application/tdB50_b

Now user1 and user2 will attempt to first pick up their objects in the gotcha directory. Rather than routing them to a non-existing path all together, you could replace the session you don't want them to go, by a simple display window, telling them in most friendly terms to 'stay the &^%&^ in your own &^%&$ company'.

have fun.

Quote:
Originally posted by Khushro
Francesco,

There is no way you can do this even thro fd6.1 as far as I can see....fd6.1 merely provides the derivation path of the VRCs for a particular package and package combination. Could you be slightly more explicit in explaining how it can be done thro fd6.1? If I have 3 companies linked to the same package combination, then the components of a particular session will point to the same VRC - there is nothing I can manipulate in fd6.1 on a company basis
__________________
Cheers,

Francesco
..............................................................

Admiral Business Solutions | My World | Baan Board | IT Happens!

"If everyone is thinking alike, then somebody isn't thinking" -- George Patton
"It's easy to cry 'bug' when the truth is that you've got a complex system and sometimes it takes a while to get all the components to co-exist peacefully." -- Doug Vargas
Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Start a session for a user that have a DEM menu garias DEM & Workflow 6 10th May 2003 06:20
Changing Company of a user Nancy Mathew Tools Administration & Installation 9 11th November 2002 19:16
How can I prevent the users from using a company? i96nds Tools Administration & Installation 7 16th April 2002 18:33


All times are GMT +2. The time now is 19:10.


©2001-2018 - Baanboard.com - Baanforums.com