Session ID:4077 Presenter:Bruce Knox Institution:University of Arkansas Argos Reporting and Value Based Security

Embed Size (px)

Citation preview

  • Slide 1

Session ID:4077 Presenter:Bruce Knox Institution:University of Arkansas Argos Reporting and Value Based Security Slide 2 Session Rules of Etiquette Please turn off your cell phone. If you must leave the session early, please do so discreetly and quietly. Please avoid side conversation during the session. Thank you for your cooperation! Slide 3 Agenda Banner Baseline Fund/Orgn Security Review, How it is setup How it works Verify that Fund/Orgn Security is Enabled Verify a USERs access Quick Conversions to Fund/Orgn Security Slide 4 Agenda Banner Baseline Fund/Orgn Security Review, How it is setup How it works Slide 5 Agenda Banner Baseline Fund/Orgn Security Review, How it is setup How it works Verify that Fund/Orgn Security is Enabled Slide 6 Agenda Banner Baseline Fund/Orgn Security Review, How it is setup How it works Verify that Fund/Orgn Security is Enabled Verify a USERs access Slide 7 Agenda Banner Baseline Fund/Orgn Security Review, How it is setup How it works Verify that Fund/Orgn Security is Enabled Verify a USERs access Quick Conversions to Fund/Orgn Security Slide 8 What is Banner Fund/Orgn Security? Fund/Orgn Security is used in ePrint and many other reporting applications. It is a part of Baseline Banner Requires securing the Query code Slide 9 What is Banner Fund/Orgn Security? Fund/Orgn Security is used in ePrint and many other reporting applications. Slide 10 What is Banner Fund/Orgn Security? Fund/Orgn Security is used in ePrint and many other reporting applications. It is a part of Baseline Banner Slide 11 What is Banner Fund/Orgn Security? Fund/Orgn Security is used in ePrint and many other reporting applications. It is a part of Baseline Banner Requires securing the Query code Slide 12 Fund/Orgn Security Enabled? Fund/Orgn Security Indicator on Form FOASYSC Must be Checked Slide 13 Fund/Orgn Security Enabled? Fund/Orgn Security Indicator on Form FOASYSC Must be Checked This Form allows one to Enable Fund/Orgn Security for the Banner Database Instance. Slide 14 Fund/Orgn Security Enabled? Slide 15 Slide 16 Is Fund/Orgn Security Enabled? Slide 17 Slide 18 Slide 19 Fund/Organization Security The User Profile Maintenance Form (FOMPROF) Allows Enabling Fund/Orgn Security for a USER Slide 20 Fund/Organization Security Setup Slide 21 Master Fund and Master Organization One can establish the USER as having: No Authority Query Only Authority Posting Authority or Both Posting and Query Slide 22 Beware of the Master Access Bypass Warning: Master Fund and Master Orgn access returns every Fund and Organization Instead: Use the Funds and Organizations on the sub-Forms: Fund Security Maintenance Form(FOMUSFN) Organization Security Maintenance Form(FOMUSOR). Slide 23 Form FOMUSFN Fund Security Slide 24 Slide 25 Form FOMUSOR Orgn Security Slide 26 Banner Security: Fund/Orgn Security -- Banner Security: Fund/Orgn Security via the Banner Tables and Forms: -- FOBSYSC is the Table that Enables Fund/Orgn Security using Form FOASYSC. -- Y for Enabled (i.e., Check Marked) -- N for Disabled -- FOBPROF is the Table that allows Master Fund and Orgn to be given using Form FOMPROF. -- FORUSFN and FORUSOR are the tables for the forms used to update Fund/Orgn Security for a USER. -- Form names are FOMUSFN and FOMUSOR, respectively. -- B means the user has both Query and Posting access. -- Q means the user only has Query access. They can see the reports but couldn't post a transaction. -- P means the user only has the ability to Post transactions and not view reports or query information. -- FOBSYSC_FUND_ORG_SECURITY_IND NOT NULL VARCHAR2(1 CHAR) -- FORUSOR_ACCESS_IND NOT NULL VARCHAR2(1 CHAR) -- FORUSFN_ACCESS_IND NOT NULL VARCHAR2(1 CHAR) -- FOBPROF_MASTER_FUND_IND VARCHAR2(1 CHAR) -- FOBPROF_MASTER_ORGN_IND VARCHAR2(1 CHAR) So, there are four Tables being checked for your Fund/Orgn Security access. Slide 27 Banner Security: Fund/Orgn Security >SELECT DISTINCT FOBSYSC_FUND_ORG_SECURITY_IND FROM FOBSYSC; Y N >SELECT DISTINCT FOBPROF_MASTER_FUND_IND FROM FOBPROF; P QB > SELECT DISTINCT FOBPROF_MASTER_ORGN_IND FROM FOBPROF; P Q B > SELECT DISTINCT FORUSFN_ACCESS_IND FROM FORUSFN; P Q B > SELECT DISTINCT FORUSOR_ACCESS_IND FROM FORUSOR; P Q B Slide 28 Why you dont want to just use the Tables Directly Slide 29 Slide 30 In Argos Slide 31 Why you dont want to just use the Tables Directly Slide 32 This Banner Function makes it work F_FUND_ORG_SECURITY_FNC (Chart_of_Accounts, FUND, ORGN, As_of_Date, -- default sysdate Query_or_Post, -- default 'Q', Which_User_ID) -- default USER Returns: Y for Yes N for No Slide 33 An Example f_fund_org_security_fnc('Z','14001','3601','','Q','SJAMES') Slide 34 Just a test in SQL*Plus BKNOX: ACES> select f_fund_org_security_fnc('Z','14001','3601','','Q','SJAMES') from dual; F_FUND_ORG_SECURITY_FNC('Z','14001','3601','','Q','SJAMES') ----------------------------------------------------------------------------------- Y Slide 35 OK, it takes a little more code to do it well For Fund/Orgn Security to be in use, the Fund/Orgn Security Indicator on FOASYSC must be Y. from..., FOBSYSC where decode(fobsysc_fund_org_security_ind,'Y', f_fund_org_security_fnc('Z',ftvfund_fund_code, ftvorgn_orgn_code,'','',''),'Y')='Y' and FOBSYSC_EFF_DATESYSDATE) and FOBSYSC_STATUS_IND = 'A' Slide 36 Be sure you are still using Fund/Orgn Security The final Y in the DECODE is the Default value. from..., FOBSYSC where decode(fobsysc_fund_org_security_ind,'Y', f_fund_org_security_fnc('Z',ftvfund_fund_code, '','','',''),'Y')='Y' and FOBSYSC_EFF_DATESYSDATE) and FOBSYSC_STATUS_IND = 'A Slide 37 Banner Fund/Orgn Security Slide 38 Which Funds and Orgns Can I See? Slide 39 Slide 40 In Argos Slide 41 Slide 42 Slide 43 Slide 44 Slide 45 Slide 46 Which Funds and Orgns Can a User View Slide 47 Slide 48 Slide 49 Slide 50 Slide 51 Slide 52 A Real Fund/Orgn Query use ), FOBSYSC where decode(fobsysc_fund_org_security_ind,'Y', f_fund_org_security_fnc('Z',OPAL_FUND,OPAL_ORGN, '','',''),'Y')='Y' and FOBSYSC_EFF_DATESYSDATE) and FOBSYSC_STATUS_IND = 'A' Slide 53 A Real Fund/Orgn Query Slide 54 Summary Verify that your site has Fund/Orgn Security Active Use Which Funds and Orgns Can a User View QV Determine and Verify a restricted access USER First, Build your Query without Fund/Orgn Security Add the code containing the F_FUND_ORG_SECURITY_FNC Function Slide 55 Summary Verify that your site has Fund/Orgn Security Active Slide 56 Summary Verify that your site has Fund/Orgn Security Active Use Which Funds and Orgns Can a User View QV Slide 57 Summary Verify that your site has Fund/Orgn Security Active Use Which Funds and Orgns Can a User View QV Determine and Verify a restricted access USER Slide 58 Summary Verify that your site has Fund/Orgn Security Active Use Which Funds and Orgns Can a User View QV Determine and Verify a restricted access USER First, Build your Query without Fund/Orgn Security Slide 59 Summary Verify that your site has Fund/Orgn Security Active Use Which Funds and Orgns Can a User View QV Determine and Verify a restricted access USER First, Build your Query without Fund/Orgn Security Add the code containing the F_FUND_ORG_SECURITY_FNC Function Slide 60 Referenced I first heard of Banner Fund/Orgn Security from Bill Pearce Principal Consultant, Strata Information Group Google for BannerFinanceUserGuide7.pdf which has a section on Fund/Orgn Security setup Slide 61 DataBlock Samples Is Fund/Orgn Security Enabled? Which Funds and Orgns Can a USER View? Which Funds and Orgns Can I See? Which Funds and Orgns Can I See? plus USER display http://betwinx.com/BannerScripts.htm The password is: scripts Or, the Evisions COOP Slide 62 Thank you! Bruce Knox at bknox @uaex.edu www.uaex.edu/bknox/ www.uaex.edu/bknox/ http://betwinx.com/ Argos objects: http://betwinx.com/BannerScripts.htm The password is: scripts This presentation ppt: http://betwinx.com/Argos2012bknox.pptx Slide 63 Questions? Slide 64 Thank you for your attention! Argos Reporting and Value Based Security 4077