ESS required access allows users to pull up forms in portal - how to secure?

We are trying to find out if there is a way to enable updates in ESS against various forms but at the same time disallowing certain users to be able to pull up those forms in portal.

For example, in order to give users access to change their own tax withholding using the form in ESS (which does AGS/Erp calls against PR13.1), we need to allow access to, and changes on the PR13.1 form in Lawson Security. However, if those users are not in the payroll department (say they are in the finance department), we don't want them to be able to key in "PR13.1" in the search box and pull up the form in portal. Is there any way to do that for non-payroll departmental users?

Find more posts tagged with

Infor Lawson Technology Group - Discussion

Comments

serafino

As long as the search box is enabled and users have access to the form, they can pull it up directly. We set up a bank of ESS-only users with a Portal Role that does not include the search box. There is no other way that I am aware of to prevent users from pulling up HR11 or PR13 directly because of access to ESS.

sriman-shivakoti

We do that as well. Core users can get to the forms but they can't access anyone but themselves unless they have rights to those employees anyway. At least that is what I remember from implementation.

asztudenyak

Not talking about ESS users here. This is about those users that have backoffice access, so they will ALWAYS have a search box.

Users should not be able to directly access forms that they do not have access to, as backoffice users. Doesn't matter that they can only access their own data - they can UPDATE their data on those forms. And if you are in payroll lockout - guess what? They can still update their data. That is big problem. Hard to believe that Infor has not addressed this.

brian-allen

That's the same with self-service. The W4 ESS update runs the base form behind the scenes. You could remove the self-service security from the ESS role that you have if you are not using that feature. You could also lock out the ESS form during payroll with a custom process or move of the .htm file.

Copyright © 2025 Infor. All rights reserved.