EZShed's Security Model

When Infor technical consultants reviewed EZShed's characteristics in order to design a security model, they took the following factors into consideration:

  • EZShed is a small company.

  • EZShed purchased only a few products from (HR and Payroll).

  • Only a few employees need access to Infor Lawson application data and batch job capabilities.

  • Because IT is a one-person department at EZShed, and because Louis has other responsibilities in addition to administering Infor Lawson, Infor Security administration must be as simple as possible.

The rules that Louis will write will grant wide access to the systems (HR and PR) that the users need. At EZShed, wide-open access is not a problem because only a few users need access to the Infor Lawson system.

Power User Access Needs (Jan and Fred)

In EZShed's case, Jan, the Human Resources (HR) administrator, and Fred, the Payroll (PR) administrator, need access to Infor Lawson application data to update data and to run jobs and reports. The table below shows the access that was included in the rules that Louis wrote.

For these users, Louis created security classes that open up the system. He wrote rules that gave access to all objects in the HR and PR system.

Type of user Needs access to
Power user Lawson Portal and tables and data related to running Lawson Portal.
Objects related to jobs and reports.
HR and Payroll applications, including data sources, forms, tables, fields and so on

Louis then created a role called PowerUser that includes the classes and rules he created. (Per EZShed's employee privacy policy, only employees who need employee information have access to it. As Louis does not need access to employee data, he will not assign the PowerUser role to himself.)

Security and Lawson Portal Administrator Access Needs (Louis)

The following sections show the system access that Louis needs to administer Infor Lawson.

Type of user Needs access to
Security and Lawson Portal administrator All Infor Security tools, including the Infor Security Administrator, Resource Management Administrator, and LID (Desktop Client).
Access to Environment objects and GEN tables required to perform system maintenance.

Objects related to administering Lawson Portal.

The Resource Management attribute, "PortalAdministrator," must be set to YES.
Objects related to jobs and reports.