Hi All - I received a request to secure several individual employees from viewing other employees within their Process Level and Department.
First, I created a separate Security Class that contained the following:
IF
(COMPANY==99&&PROCESS_LEVEL=='DCAND'&&DEPARTMENT=='00051')||(COMPANY==99&&PROCESS_LEVEL=='DCPHO'&&DEPARTMENT=='00051')||(COMPANY==99&&PROCESS_LEVEL=='DCLTS'&&DEPARTMENT=='00052')
NO ACCESS
else
ALL ACCESS
This worked to a point - we could not see people in dept 00051 and 00052 – that we were not suppose to see……but, on the other hand, we could see people, in other process levels, that we were not suppose to see(because of the ALL ACCESS.....it was in contention with our current Security Class that uses the Process Level Element Group....this security class is assigned to employees who are in one of the process levels listed below....this is an example of just the HR system code....
IF
(SystemCode==('HR')&&COMPANY==99&&PROCESS_LEVEL=='DCLTS')||(SystemCode==('HR')&&COMPANY==99&&PROCESS_LEVEL=='DCPHO')||(SystemCode==('HR')&&COMPANY==99&&PROCESS_LEVEL=='DCAND')
ALL ACCESS
else
NO ACCESS
Next, I tried incorporatiing the DEPARTMENT into the current Security Class: I know it is not defined in the ELEMENT GROUPS....I was going to create a custom ELEMENT GROUP that contained the DEPARTMENT but before I do that, I was looking for other options....
IF
(SystemCode==('HR')&&COMPANY==99&&PROCESS_LEVEL=='DCLTS'&&DEPARTMENT>'00052')||(SystemCode==('HR')&&COMPANY==99&&PROCESS_LEVEL=='DCPHO'&& DEPARTMENT>'00051')||(SystemCode==('HR')&&COMPANY==99&&PROCESS_LEVEL=='DCAND'&&DEPARTMENT>'00051')
ALL ACCESS
else
NO ACCESS
Hope this isn't too confusing!
Does anyone have any other ideas of how to secure employees in a department from seeing other employees in their department?
thanks!
Colleen
