Security testing - Matrix/Check List

We are in the testing phase for LSF Security implementation. Has anyone come up with a good matrix (check-off sheet) that was used to ensure everything was tested properly? I would like to give our application superusers a type of check list they can use for noting what worked & what didn't.

Find more posts tagged with

Infor Lawson Technology Group - Discussion

Comments

unknown

As with most LAUA implimentations, the majority of issues will come from "But I had access under the old Security". LS9 tends to be more granular, by definition.

We created a set of documentation, asking the Users to test the Lawson Forms which they need, and then married up the requirements with the Security Classes/Roles.

Please send your Email Address, and I will send a copy of the documentation.

araminta-chesters

I would like a copy of the documentation please.
madeline.williamson@sih.net

dscheppa

I would also
kathy.williams@ctca-hope.com

unknown

Can I please get a copy? my email is Rnarasimhan@saintpetersuh.com

Thanks

cynthia-bushnaq

I too would like a copy.

cynthia.bushnaq@georgesinc.com

Thanks!

unknown

I would like a copy please. kdistler@cornerstonebrands.com Thank you.

unknown

May I have a copy please? steven.nguyen@sdhc.k12.fl.us

tom

I would take one as well, Gregory.Yoder@sjhsyr.org

jeltzroth

Hello Peter,
I would like a copy of your documentation as well.
chris.boeye@bvsd.org
Thanks!

mpientak

I would like a copy as well, Peter.

Thanks - cpaine@iso-ne.com

unknown

I would like a copy also. Thank you very much in advance.
Robin.Metzler@lvh.com

sarb-nahal

I would like a copy, too. Thank you!

unknown

Peter,
I would like a copy of your documentation as well.
eric.baldwin@jackson.com
Thanks!

jreese

Why don't you just add the documentation to this thread rather than have everyone requesting it be sent to them? Then they can just download it from here if they would like a copy.

unknown

Yes, please instead of asking for email addresses, please just post it and let people download it as they need it.

Thank you.

unknown

Please send me a copy also. Thank you so much.
tom.dewey@dal.frb.org

unknown

You read my mind jreese.

Here's what I put together.
I requested that each User sign-off the documentation, along with exactly what they tested via the Role Spreadsheets.
They would not necessarily need to sign-off every Form - only if they required the Form for their Job function.

unknown

Wow this is very good stuff. thank you very much Peter.

unknown

Thank you Peter

unknown

Thanks Peter

deanna-plant

Thank you for sharing Peter! I am assuming you got the role information by running the User Security Report but how did you get the "Description" of each token? That would be helpful to the user.

moellerg

one way to get it is by dumping a table in GEN.
rngdbdump -ct gen SCREEN -v ProductLine=LPROD

It treats the screen number a little bit odd.... where 49 = 1

unknown

The Roles themselves were determined by the Data Owner, and I then allocated the relevant Roles to the individual, dependant upon their Job Function.

There were some exceptions, and those were the feew and far between. I then got agreement from the Data Owners to give them the additions; once access agreed and successful, then the Security was moved over to LS9.

This was completed by each Department in turn, with Management Approval/Agreement.

This is definitely to be completed on a phased basis, it is hard to complete a 'Big Bang' - that comes later with SSO - LOL.

P

Copyright © 2025 Infor. All rights reserved.