Security Aspects of M3 Business Engine Functions

This section describes the attributes of M3 Business Engine functions that relate to security. Use 'Function. Open' (MNS110) to access the definitions of menus and functions within M3 Business Engine.

These are the attributes of a function that relate to security:

• Function

  A function consists of an ID and a name. A function is in the menu and you start the program by specifying the function. The function ID is often the same as the ID of the function/program you start, but it does not have to be. You can, for example, name the function (MMS001) as 'ITEMS' in the function ID field. It is the value in the Program field that determines which program is connected to 'your' function ID.

  The function name is specified on 'Function. Open' (MNS110/F).

  You can name (MMS200) "My Item Register" with the function ID "ITEMS". For your function to start (MMS200), specify 'MMS200' in the 'Program' field.

• Function category

  There are several categories of functions: those that actually run programs, menus, text functions (which are used to place remarks or comments on menus), function groups, and functions that change to a different company or division. Although you can apply security to most of these categories of functions, only two categories have a specific role to play in M3 BE Security: the categories GRP and MNU.

  • Function category GRP

    A function with a category of GRP is a function group. Other functions can be placed into a function group. Groups are used to simplify security maintenance by reducing the number of entries made to the list of authorized functions/users. A function with the category GRP cannot be placed in other groups. That is, you cannot have function groups within groups. Also, a single function cannot be a member of more than one group. A function can either be in one group or no groups at all.

  • Function category MNU

    Menus are defined by the function category MNU. This allows you to use option 12='Menu' in 'Function. Open' (MNS110) to attach menu options to the menu. A function with the category MNU can be placed into other MNU functions. That is, you can have MNU groups within MNU groups. This is also done by selecting option 12.

• PIN code check

  Before the function runs, the user must specify the correct PIN code. This prevents unauthorized users from running a function at an unattached panel.

• Authorization required

  On 'Function. Open' (MNS110/E), the 'Authorization required' field has these settings:

  • Not selected (0) means that authorization for the function is checked according to the entries made in 'Authorization by User. Display' (SES401) for the user. If no entries exist in 'Authorization by User. Display' (SES401) for the user, the function is considered approved and open. This means that the system is open for all users if no entries are made in SES400/401, but can be partly limited for some user, user/groups by adding records in SES400/401 for these user/groups.
  • Selected (1) means that authorization for the function is checked according to the entries made in 'Authorization by User. Display' (SES401) for the user. If no entries exist in 'Authorization by User. Display' (SES401) for the user, the function is considered denied and restricted. This means that the system is closed for all users if no entries are made in SES400/401, but can be opened in selected areas and functions for user, user/groups by adding records in SES400/401 for these user/groups.

  The default setting for M3 Business Engine is inactivated (0) for all functions, except for archiving functions where authority set up is required.

  Note: To restrict access in all company and divisions for a specific function, you should activate the 'Authorization required' field on 'Function. Open' (MNS110/E) for all functions you made entries in 'Function. Connect Authorization by Role' (SES400).

  To mass change the value for all functions (except MNU functions) to 1, use 'Function. Mass Update' (MNS905).

• Program

  The 'Program' field is the actual program that should be started when you specify the current function ID.

  The function consists of an ID and a name. A function is in the menu and you start the program by specifying the function. The function ID is often the same as the ID of the function/program you start, but it does not have to be. You can, for example, name the function (MMS001) as 'ITEMS' in the function ID field. It is the value in the 'Program' field that determines what program is connected to 'your' function ID.

  The function name is specified on 'Function. Open' (MNS110/F).

  You can name (MMS200) "My Item Register" with the function ID "ITEMS." For your function to start (MMS200), specify 'MMS200' in the 'Program' field.