26
Copyright © Oracle Corporation, 2002. All rights reserved. Fundamentals of System Administration

Fundamentals of System Administration

Embed Size (px)

Citation preview

8/3/2019 Fundamentals of System Administration

http://slidepdf.com/reader/full/fundamentals-of-system-administration 1/26

Copyright © Oracle Corporation, 2002. All rights reserved.

Fundamentals of System Administration

8/3/2019 Fundamentals of System Administration

http://slidepdf.com/reader/full/fundamentals-of-system-administration 2/26

1-2 Copyright © Oracle Corporation, 2002. All rights reserved.

Course Objectives

After completing this lesson, you should be ableto do the following:

• Describe the 11i eBusiness Suite security model

• Define users

• Use Menu and Function security to modify

responsibilities

• Understand how Securing and Excluding attributes

work

• Describe and set profile options

8/3/2019 Fundamentals of System Administration

http://slidepdf.com/reader/full/fundamentals-of-system-administration 3/26

1-3 Copyright © Oracle Corporation, 2002. All rights reserved.

Agenda

• Understand application security

• Define users

• Understand responsibilities

• Understand menus• Set system and personal profile values

8/3/2019 Fundamentals of System Administration

http://slidepdf.com/reader/full/fundamentals-of-system-administration 4/26

1-4 Copyright © Oracle Corporation, 2002. All rights reserved.

Application Security Overview

Windows

ReportsUser 

Oracle

Application

Responsibility

8/3/2019 Fundamentals of System Administration

http://slidepdf.com/reader/full/fundamentals-of-system-administration 5/26

1-5 Copyright © Oracle Corporation, 2002. All rights reserved.

Agenda

• Understand application security

• Define users

• Understand responsibilities

• Understand menus• Set system and personal profile values

8/3/2019 Fundamentals of System Administration

http://slidepdf.com/reader/full/fundamentals-of-system-administration 6/26

1-6 Copyright © Oracle Corporation, 2002. All rights reserved.

Defining a New Application User 

Assign one or more

responsibilities

Enter user 

name and password

Require password changeLimit access attempts

Enter user’sstart and end dates

1

2

3

4

5 Define buyers, salesforcecreate CRM resource

8/3/2019 Fundamentals of System Administration

http://slidepdf.com/reader/full/fundamentals-of-system-administration 7/261-7 Copyright © Oracle Corporation, 2002. All rights reserved.

Assigning Responsibilities to Users

Define

or modifyresponsibility

Excludefunctions

and menus

Defineapplication

user 

Using PredefinedResponsibility

Using Custom Responsibility

Defineapplication

user 

Defineor modify

components

1 2

1

Assign Assign

Define

or 

Modify

8/3/2019 Fundamentals of System Administration

http://slidepdf.com/reader/full/fundamentals-of-system-administration 8/261-8 Copyright © Oracle Corporation, 2002. All rights reserved.

Agenda

• Understand application security

• Define users

• Understand responsibilities

• Understand menus• Set system and personal profile values

8/3/2019 Fundamentals of System Administration

http://slidepdf.com/reader/full/fundamentals-of-system-administration 9/261-9 Copyright © Oracle Corporation, 2002. All rights reserved.

Importance of Responsibilities

Responsibilities determine:

• Menus and forms you can access

• Reports you can run

• The set of books you’ll work with•  Your operating unit

• Which types of applications you may access

8/3/2019 Fundamentals of System Administration

http://slidepdf.com/reader/full/fundamentals-of-system-administration 10/261-10 Copyright © Oracle Corporation, 2002. All rights reserved.

Components of a Responsibility

Request security

groupData group

Exclusions

Menu

8/3/2019 Fundamentals of System Administration

http://slidepdf.com/reader/full/fundamentals-of-system-administration 11/261-11 Copyright © Oracle Corporation, 2002. All rights reserved.

Defining a New Responsibility

Enter application and

responsibility name

Enter start and end dates

Select data group

Select menu

1

2

3

4

Select request group

Enter menu or function exclusions

5

6

Enter securing or excluding attributes7

8/3/2019 Fundamentals of System Administration

http://slidepdf.com/reader/full/fundamentals-of-system-administration 12/261-12 Copyright © Oracle Corporation, 2002. All rights reserved.

Menu Level 1

Menu Level 2

Menu Level 2

Function

Function

Function

Function

Function

Function

SubfunctionSubfunction

Subfunction

Menu Level 3

Menu Level 2

Function: A set of executable code

available as a menu

option

Subfunction: A subset

of a form’s functionality

Managing Function Security

8/3/2019 Fundamentals of System Administration

http://slidepdf.com/reader/full/fundamentals-of-system-administration 13/261-13 Copyright © Oracle Corporation, 2002. All rights reserved.

Menu Level 1 

Menu Level 2

Menu Level 2

Function

Function

Function

Function

FunctionFunction

Function

Subfunction

Subfunction

Subfunction

Menu Level 3

Menu Level 2

Menu Level 1

Menu Level 2

Menu Level 2

Function

Function

FunctionFunction

Function

Function

Built into the menu.

Seen in Navigator.

Menu Displays in the Navigator 

8/3/2019 Fundamentals of System Administration

http://slidepdf.com/reader/full/fundamentals-of-system-administration 14/261-14 Copyright © Oracle Corporation, 2002. All rights reserved.

Menu Level 1

Menu Level 2  

Menu Level 2

Function-C

Function-E

Function-G 

Function-F 

Function-A

Function-B

Function-A

Function-D

Function-D

Menu Level 3

Menu Level 2

Function-H 

Excluding a function affects the

function regardless of level.

Excluding a menu excludes allits child functions.

Excluding Functions and Menus

8/3/2019 Fundamentals of System Administration

http://slidepdf.com/reader/full/fundamentals-of-system-administration 15/261-15 Copyright © Oracle Corporation, 2002. All rights reserved.

Attribute Control and Web Inquiries

• Securing Attributes

 – Users see only the information that matches the

assigned securing attribute values.

 – Assign securing attributes to a responsibility to

secure rows.

 – Assign securing attribute values to users.

• Excluding Attributes

 – Hide specific database columns from users.

 – Assign excluding attributes to a responsibility tosecure columns.

8/3/2019 Fundamentals of System Administration

http://slidepdf.com/reader/full/fundamentals-of-system-administration 16/261-16 Copyright © Oracle Corporation, 2002. All rights reserved.

Securing Attributes

Securing ValueCUST_ID = 1234

(XYZ Company)

Orders

Shipments

View Sales Orders

FUNC_VIEW_SO

Securing Attribute

CUST_IDInquiry Output

Dataflow

View

CUST_ID = 1000

CUST_ID = 1234

CUST_ID = 2000

Sales Order Summary

Item Customer  

Monitor XYZ Co.

CPU XYZ Co.

Speakers XYZ Co.

Function

User 

Responsibility

8/3/2019 Fundamentals of System Administration

http://slidepdf.com/reader/full/fundamentals-of-system-administration 17/261-17 Copyright © Oracle Corporation, 2002. All rights reserved.

Example of Securing Attributes

ICX_CUSTOMER_CONTACT_ID = 1001

Unsecuredquery output

Responsibilitysecured by

customer 

contact

Secured

query output

Order 

Num

Customer 

Name

Order 

Total

Customer 

Contact1234 Air France 1,272.00 1001

1235 Air France 1,856.00 1200

1236 Air France 978.00 1001

1237 Air France 872.00 1153

Order Num

Customer Name

Order Total

Customer Contact

1234 Air France 1,272.00 1001

1236 Air France 978.00 1001

Products and Orders (by Customer Contact)

Secured by ICX_CUSTOMER_CONTACT_ID

8/3/2019 Fundamentals of System Administration

http://slidepdf.com/reader/full/fundamentals-of-system-administration 18/261-18 Copyright © Oracle Corporation, 2002. All rights reserved.

Excluding Attributes

Name,Cost Center,

Salary

View Employee Info

FUNC_EMP_INFO

Excluding AttributeICX_SALARY

Inquiry Output

Inquiry

View

NAME = SMITH

CC = 112

SALARY = 50000

Function

User 

Responsibility

Name

SmithJonesHarris

Employee Info Summary

Cost Center 

112114120

8/3/2019 Fundamentals of System Administration

http://slidepdf.com/reader/full/fundamentals-of-system-administration 19/261-19 Copyright © Oracle Corporation, 2002. All rights reserved.

Agenda

• Understand application security

• Define users

• Understand responsibilities

• Understand menus• Set system and personal profile values

8/3/2019 Fundamentals of System Administration

http://slidepdf.com/reader/full/fundamentals-of-system-administration 20/261-20 Copyright © Oracle Corporation, 2002. All rights reserved.

Defining a New Menu Structure

Identify menu needs

Print function security report for similar existing menus

Start with a blank menu form

Print a function security report set todocument the new menu

Build the menu from bottom to top

Plan the menu structure

Assign to the responsibility

8/3/2019 Fundamentals of System Administration

http://slidepdf.com/reader/full/fundamentals-of-system-administration 21/261-21 Copyright © Oracle Corporation, 2002. All rights reserved.

Menu Guidelines

• Design prompts with unique first letters (typing thefirst letter will automatically select it).

• Sequence the prompts with the most frequentlyused functions first.

• Entries cannot be copied from one menu definitionto another.

• Use acronyms only when an industry term or company word is so capitalized—for example, WIPor COGS.

• Use integers in numbering.

8/3/2019 Fundamentals of System Administration

http://slidepdf.com/reader/full/fundamentals-of-system-administration 22/261-22 Copyright © Oracle Corporation, 2002. All rights reserved.

Agenda

• Understand application security

• Define users

• Understand responsibilities

• Understand menus• Set system and personal profile values

8/3/2019 Fundamentals of System Administration

http://slidepdf.com/reader/full/fundamentals-of-system-administration 23/261-23 Copyright © Oracle Corporation, 2002. All rights reserved.

Setting Profile Hierarchy Levels

User 

Responsibility

Application

Site

Printer: AtlantaAudit Trail: InactiveReport Copies: 1

Printer: Atlanta

Audit Trail: ActiveActive

Report Copies: 1

Printer: Atlanta

Audit Trail: InactiveReport Copies: 1

Printer: Boston

Audit Trail:  Inactive

Report Copies: 2

Profile Options

Changed

at User 

Level

Changed at

Application

Level

     O     v    e     r    r     i     d 

e     s 

8/3/2019 Fundamentals of System Administration

http://slidepdf.com/reader/full/fundamentals-of-system-administration 24/261-24 Copyright © Oracle Corporation, 2002. All rights reserved.

Setting System Profile Options

The system administrator can set profile options at any

level:

• Navigate to (N) Profile > System to see the Find

System Profile Values window.

•  You can set a profile value at the user,

responsibility, site, or application level.

8/3/2019 Fundamentals of System Administration

http://slidepdf.com/reader/full/fundamentals-of-system-administration 25/261-25 Copyright © Oracle Corporation, 2002. All rights reserved.

Using User Profile Values

as Defaults

Window Field

Concurrent

ProgramsRequest Set

Key Flexfield

Segments

Descriptive

Flexfield Segments

Parameter Detail region—

Default Type/Default Value

Parameters

Report

Parameters

Segment

Segment

Default Type/Default Value

Validation Information region—

Default Type/Default Value

Form

Validation Information region—

Default Type/Default Value

8/3/2019 Fundamentals of System Administration

http://slidepdf.com/reader/full/fundamentals-of-system-administration 26/26

Summary

In this lesson, you should have learned how to:

• Describe the 11i eBusiness Suite security model

• Define users

• Use Menu and Function security to modifyresponsibilities

• Understand how Securing and Excluding attributes

work

• Describe and set profile options