Securable Objects Used by Road Rager's AP Power Users

The Road Rager security administrators made an inventory of all securable objects that users need. Because users must be specifically granted access to all objects, rules need to be written for all objects that users need access to.

Note: The security administrator went through a similar process to identify objects needed by other Lawson users, including Lawson Portal users, Lawson Add-ins for Microsoft Office users and, system administrators.

AP Clerk objects

AP clerks have the ability to access the same securable objects that AP managers need but with some restrictions:

  • Data source: All access

  • System codes: All access to the following:

    • AC

    • AP

    • CB

    • IC

    • IF

    • GL

    • MA

    • PC

    • TE

    • TX

    Note: The reason why other system codes besides AP are needed will be explained in a later section.

  • Online: AP25, AP25.1: Inquire only on both process levels

  • Online: AP20, AP20.1 and AP20.2: Full access to assigned process level only

  • Batch: AP150, AP175: Full access to assigned process level only

  • Batch: AP155, AP170: Company and Process Level not used

  • Files (tables) associated with all of the above securable objects and related objects.

    Note: Road Rager uses batch processing of invoices.

Road Rager made use Company and Process Level security in their AP implementation, so, for the forms in which Company and Process Level security applies, they had to write rules that took Company and Process Level security into consideration. Company and Process Level is a feature of some Lawson forms that lets customers create subdivisions of data, in this case, cost centers and accounts, so that a user's access can be restricted only to the cost centers and accounts that he or she should see. More information on this subject is in a later section of this document.

Road Rager's goal was to keep the work of AP clerks in Biloxi separate from that of clerks in Brownsville. The application administrator who set up AP created two Process Levels: Biloxi and Brownsville. Then the security administrator wrote rules to check Company and Process Level when a clerk attempts to access a form. When a clerk in Biloxi opens a form, he or she can see only data from Biloxi. When a clerk in Brownsville opens a form, he or she can see only data from Brownsville. A later section of this chapter provides more details about the rules that the security administrator wrote.

AP Manager objects

After creating the AP clerk rules, the security administrator found creating rules for the AP manager simple.

The AP manager needs full access to the vendor records in both Biloxi and Brownsville, so Company and Process Level security did not need to be taken into consideration. The manager can see all data. Also, the manager was not restricted to Inquire only on some forms. The Road Rager security administrator created some simple grant all access rules that gave the AP manager unrestricted access to:

  • The data source

  • System codes: All access to the following:

    • AC

    • AP

    • CB

    • IC

    • IF

    • GL

    • MA

    • PC

    • TE

    • TX

    Note: The reason why other system codes besides AP are needed will be explained in a later section.

  • Online programs: AP20, AP20.1, AP20.2, AP25, AP25.1

  • Batch programs: AP150, AP155, AP170, AP175

  • Files (tables), selects, and drills associated with the securable objects that Road Rager uses.