Lawson Security

Is anybody really good at writing Security Rules? I have a couple of users in HR that need to be locked down in the PA52 screen. On the main tab there is a field called Immediate that I need to hide for certain users in HR, but need it open for the 2 users that need to process the Actions. Does anybody know how to do that in the Security Tool? I'm not the greatest in writing rules so thought maybe somebody already had an issue similar to this.

Find more posts tagged with

Infor Lawson Technology Group - Discussion

Comments

unknown

This is definitely possible, but requires a bit more information. You can code a rule with user names, but that's a nightmare to maintain. The better idea is to create a Group with just these 2 users as members.

This example uses "pa52immediate" as the group name. The field name (form.IMMEDIATE_ACTION) is the same for PA52.1 and PA52.4.

A condition of "If user.isMemberOf(pa52immediate) && form.IMMEDIATE_ACTION == 'Y' " then all access will give those users access. This won't hide the field, but will mean that only the members of that group can process an immediate action.

The else depends on what it is other users with access to PA52 should be able to do. It might be All Inquiries, Change or some other combination; or you might need another if statement.

If this isn't clear let me know.

unknown

So, basically i just have to build a new Role called something like what is mentioned above and then assign all the Security Classes that the old Role had and then make the changes? Can you copy Roles or do you have to basically start from scratch? The users that are not going to be using it, all i want them to do is be able to Inquire on the screen, and be able to put in info but not process it Immediate.

unknown

Question for ChelleR - where are those groups maintained?

unknown

Groups are maintained using the RM Administrator. When you open it choose New View then Group. The Add - Group.

unknown

Not a Role but a Group.

unknown

Yeah, that always throws me a little. The RM Administrator is a different icon from the regular LSA icon. I think it's separated out because group maintenance is something you don't do every day.

unknown

Yes, we use group for quick filter to classes. Then use roles as filters are functions, data and drill around.

Copyright © 2025 Infor. All rights reserved.