LSF 901 Security, Securing Company

cbatiao

Hi,
Has anyone done Company security (on mulit Compnay settings)?

Please share how you secure a Company view for a multi-company setting.
We have quite a number of Companies in our setup, I got a request to limit some users access to one Company. I created a class and Secure the Company by Element COMPANY, assign the class to role, assign the role to the user. I then added the Company ID to the Users RM CompanyControl attribute. It worked on a form where only the company ID is required as input (ex GL10) but didnt work on other forms where more than the Company ID is required for input (Ex. GL90).
Any help would be appreciated.
Thanks

moellerg

Hello!

We have the need here too. I've got something done, but not completely tested. I created a class, am doing security by the Element COMPANY.. but I've written the following rule in.

if(user.attributeContains('CompanyControl',lztrim(COMPANY)))
'ALL_ACCESS,'
else
'NO_ACCESS,'

This way, we modify the users LSA record and modify the 'CompanyControl' attribute.... giving them access to what company or companies that they need.

There is one sticking point... if you use activites, the "security code" in AC00 is checked against the company control attribute. All of our activity groups were mapped to a code (999) for instance and we got security violations all over the place until we added 999 to our company control for the users who needed to access activities.

Also, there are some possible concerns for ESS, but I haven't been able to nail those down yet. I'd appreciate any feedback as you move forward.