Baanboard.com

Go Back   Baanboard.com > Forum > Baan Quick Support: Functional & Technical > DEM & Workflow

User login

Frontpage Sponsor

Main

Poll
How big is your Baan-DB (just Data AND Indexes)
0 - 200 GB
19%
200 - 500 GB
27%
500 - 800 GB
4%
800 - 1200 GB
7%
1200 - 1500 GB
7%
1500 - 2000 GB
12%
> 2000 GB
25%
Total votes: 85

Baanboard at LinkedIn


Reference Content

Reply
 
Thread Tools Display Modes
  #1  
Old 21st January 2020, 10:35
VishalMistry's Avatar
VishalMistry VishalMistry is offline
Guru
 
Join Date: Dec 2004
Location: India, Gujarat
Posts: 665
VishalMistry has a little shameless behaviour in the past
Baan: Baan IV, ERPLn - DB: SQL Server 2000 / 2008 - OS: Windows Server 2003 / 2008
Red face Dem Authorization Report
Baan: ERP LN 6.1 FP2

Hi,

We have ERPLN FP2 environment and we use DEM process browsers for ERP users.

Now we have got requirement from auditors where they want to check which users are having what rights on specific sessions.

We have created a report that shows the DEM roles and business processes assigned to employees. But we are unable to get session level authorizations.

Can anybody guide how we can get employee's session level authorizations.

Vishal
Attached Images
File Type: png user authorizations by role and bp.png (50.6 KB, 6 views)
Reply With Quote
Sponsored Links
  #2  
Old 21st January 2020, 11:51
Juergen's Avatar
Juergen Juergen is offline
Guru
 
Join Date: Aug 2001
Location: Germany
Posts: 598
Juergen is on a distinguished road
Baan: IVc4, ERPLN - DB: Oracle - OS: Linux, Windows
Hi Vishal,

you can try with Session "Print DEM Session Authorization".

Call that report from Session "Project Models" -> Choose Session Employees by Project Model".

Regards,
Juergen
Attached Images
File Type: jpg DEM_SESS_AUTH.JPG (134.5 KB, 10 views)
Reply With Quote
  #3  
Old 22nd January 2020, 20:26
BaanInOhio BaanInOhio is offline
Senior Member
 
Join Date: Oct 2005
Location: Northeast Ohio
Posts: 199
BaanInOhio is on a distinguished road
Baan: Baan 4c4, 5C, LN - DB: Informix, Oracle, SQL - OS: HP UX, Win2K
We couldn't find a suitable session for DEM reporting in the standard system, so wrote our own. It's pretty complicated if you include all potential situations: roles that include roles, business process that include other business process, and optionally subapplications (specific options). It starts with the roles that a user has, then walks the structure from roles to business processes to sessions. Optionally, you can go another level from sessions to subapplications since many important sessions are called from others (like maintain business partners or addresses from sales orders). Uses these tables:

tgbrg820, Roles by Employee
ttaad200, User Data - identifies superusers and those with run/program.
tgbrg840, Employees by Project Model
ttaad100, Companies - determine for current package VRC.
tgbrg000, Central Enterprise Modeler Data Company - get DEM defaults for some table lookups.
tgbrg005, Runtime Project Model per Company - get DEM defaults for some table lookups.
tgbrg035, DEM Parameters - get DEM defaults for some table lookups.
tgbrg100, Versions - get DEM defaults for some table lookups.
ttadv040, Current Package Version by User - get DEM defaults for some table lookups.
tgbrg836, User DEM Settings - identifies menu browser vs process browser users.
tgbrg110, Current Versions by User - get DEM defaults for some table lookups.
tgbrg300, Business Models - if used, for business process/role links with less than full access.
tgbrg340, Roles by Business Process Business Model
tgbrg500, Business Processes
tgbrg520, Business Process Activities - sessions
tgbrg523, Subapplications by Business Process Activity - specific options/zoom sessions.
ttadv200, Sessions - determine if a session is print/display or full/update access.
tgbrg555, Applications by Component
tgbrg557, Components
tgbrg810, Roles
tgbrg815, Subroles by Role
ttams330, Session Authorizations by Package - include AMS permissions.
ttams331, Session Authorizations by Module - include AMS permissions.
ttams332, Session Authorizations by Session - include AMS permissions.
ttams333, Session Authorizations by Company - include AMS permissions.
ttadv112, Package VRCs in Package Combination (Runtime)

Moving to a more recent tools level and enabling the Enhanced AMS feature greatly simplifies the process since new AMS tables are generated that already has sessions by roles and security level. Another consolidation table in DEM (tgbrg998) provides the business process for each role/session.


I found it easier to create a holding table to store the data as it was discovered in order to support nested roles and business processes.

Determine roles by user (as linked in roles and nested roles)
Determine business processes by role and user (as linked and nested business processes)
Determine sessions by business process, role, and user.
Optionally, determine subapplication sessions by sessions, business process, role, and user.
Check AMS for any overrides by company.
Keep updating temporary table until all sessions and permissions are filled.
Report from temporary table.
Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Invoices printing issue-display last record with 2 lines tracylee Tools Development 7 20th October 2017 10:51
Issues with mimic of database auths. sessions BaanTech Tools Administration & Installation 3 6th February 2017 07:40
DEM Authorization or Role Data Authorization bhushanchanda Tools Administration & Installation 2 19th March 2013 17:03
solving recursion problems rmarles Tools Development 2 25th January 2005 21:23
DEM Authorization Overview Baan 5.c (REPORT?!?) Magast DEM & Workflow 0 9th August 2002 12:45


All times are GMT +2. The time now is 04:13.


©2001-2018 - Baanboard.com - Baanforums.com