Labor metric security

The security infrastructure is made up of several components. Fields on the different forms and pages are secured so that certain users can view or manipulate them. Team security determines which supervisors can approve time and different requests for groups of employees.

Labor Metric Security (LMS) functions similarly by restricting access to certain labor metrics, such as jobs, departments, time codes, or hour types. Users and employees can only view, or apply to timesheets, the labor metrics for which they have access.

LMS can be user-based or employee-based. User-based LMS restricts the logged-on user to certain labor metrics, regardless of the timesheet the user is editing. For example, if the user JSMITH can only access the WRK, BRK, and HOL time codes, when JSMITH is logged on, only those three time codes are displayed on the timesheet. If another user, such as the user’s supervisor, has marked time on the user’s timesheet with a time code that the user cannot access, the Time Code field is blank.

Employee-based LMS ignores what user is accessing the labor metrics. Instead, LMS restricts which labor metrics can be applied to certain employees’ timesheets. So, even if a supervisor or administrator user is logged on, only the labor metrics the employee has access to can be applied to the employee’s timesheet.

LMS grants or denies access to labor metrics based on group membership. An LMS group is assigned labor metrics, users, and employees. Users are members of a LMS group if their security group or team is assigned to the LMS group. Employees are members when their team, calculation group, or pay group is assigned to an LMS group.

Because both users and employees can belong to teams, assigning teams to LMS groups can add users and employees to the group.

Users and employees can only select the labor metrics that are in their LMS group. So, if Karen is assigned to STANDARD DATA and George is assigned to RESTRICTED DATA, and the time codes WRK1 and BRK1 are assigned to STANDARD DATA, Karen can select WRK1 or BRK1 on her timesheet, but George cannot.

Labor metrics can only be assigned to one LMS group, but employees can belong to multiple LMS groups. For example, the time code WRK can only belong to one LMS group, but you can assign every employee and user to that LMS group so that everyone can access the WRK time code.

You can set up labor metric security to share some labor metrics and restrict others. For example, if you had three sets of labor metrics that you needed to restrict to different teams, but one team of employees needed access to all labor metrics, linking the team to all three LMS groups would give the employees of that team access to all the labor metrics.

In another example, you could set LMS to grant every employee access to some common labor metrics. Create one LMS group with the common labor metrics, such as the WRK and BRK time codes, and assign every employee and user to the group. This setup grants everyone access to the common labor metrics.

Setting up labor metric security involves these tasks:

  1. Creating labor metric security groups, if necessary
  2. Assigning users and employees to existing labor metric security groups
  3. Assigning labor metrics to labor metric security groups
  4. Configuring appropriate DBLookups to use labor metric security so that the labor metric security settings take effect

For example, a company can set up time code restrictions for three main groups of users: employees, supervisors, and executives. The company can restrict the time codes that users can select on the Daily Timesheet using LMS, according to these rules:

  • Employees can access WRK, BRK, and MEAL time codes.
  • Supervisors can access the same time codes as employees, plus the JURY and MILTRY time codes.
  • Executives can access the same time codes as supervisors, plus the BONUS time code.

To set up labor metric security, the system administrator performs these tasks:

  1. Create three LMS groups: Employee Tcodes, Supervisor Tcodes, and Executive Tcodes.
  2. Assign the appropriate time codes to the LMS groups (WRK, BRK, and MEAL to Employee Tcodes, JURY and MILTRY to Supervisor Tcodes, and BONUS to Executive Tcodes).
  3. Assign the appropriate security groups to the LMS groups.
  4. Configure the Time Code lookups on the Daily Timesheet by modifying the Field Parameters field to use this SELECT statement: 

sourceType=SQL width='7' sourceKeyField=TCODE_NAME sourceLabelField=TCODE_NAME 
source="SELECT TIME_CODE.TCODE_NAME, TIME_CODE.TCODE_NAME Name FROM EMPLOYEE, LABMET_SEC_GRP, 
VL_TIME_CODE TIME_CODE WHERE EMPLOYEE.EMP_ID = ? AND EMPLOYEE.CALCGRP_ID = LABMET_SEC_GRP.CALCGRP_ID 
AND TIME_CODE.LMS_ID = LABMET_SEC_GRP.LMS_ID AND SYSDATE BETWEEN LMSG_START_SYSDATE AND LMSG_END_SYSDATE" 
labelFieldStatus=edit sourceParams='STRING==#request.EMP_ID#'