ASSIGN EXECUTION RIGHTS#

The Assign Execution Rights (IMER) form is used for setting the execution rights for each role and user for each function.

IMER determines the functions for the new role(s) and what those roles can do within the function (i.e. Create, Update, Retrieve, Delete). You can define the user or role (but not both) to have execution to the function. We supply by default the P2K_MASTER role. When you start up you may have this role assign to a few core users, but when you go live you will have P2K_MASTER assigned to P2K_USER.

P2K_USER role itself should not be used here except for emergencies. Otherwise you may end up losing the ability to audit which user did what changes to the system.

If you wanted to take away rights from someone who had a role with full execution rights to a function, you would do that by specifying that user and removing the toggle to the execution right you wish removed. This will override the CRUD they have in their role.

Assign Functions to Roles#

There are two ways to assign functions to roles:

1. In IMER, call up the function and give the role access to the specifics you want them to have based on CRUD.
2. In the Define Roles (IMRO) screen for the specific Execution Rights role, go to the Execution Rights tab and add the function you wish that role to have access to.
3. Now log out and then log back. This step is needed in order for the changes to security to take affect. It is important that security is setup with all users off the system.

The rights assigned to the P2K_MASTER role must NOT be changed. These are generated by script and gives the master capability to the role (and thus P2K user) to be able to access all parts of the system.

The definition data for the Assign Execution Rights screen is stored in the P2K_AM_SECURITY_RIGHTS and P2K_AM_FUNCTIONS tables.

User or Role

These fields allow you to chose the individual or role you wish to assign execution rights to.

The following toggles allow you to indicate the specific execution rights you wish grant to the user or role.

Create

If both role and function execution rights are set to “Yes”, a user with this role may create data in this function.

If the boolean for either the Role Execution Rights or the Function Execution ‘Allowed’ Rights are “No”, then the user will not be able to create data in the function.

Retrieve

If both role and function execution rights are set to “Yes”, a user with this role may retrieve data in this function.

If the boolean for either the Role Execution Rights or the Function Execution ‘Allowed’ Rights are “No”, then the user will not be able to retrieve data in the function.

Update

If both role and function execution rights are set to “Yes”, a user with this role may update data in this function.

If the boolean for either the Role Execution Rights or the Function Execution ‘Allowed’ Rights are “No”, then the user will not be able to update data in the function.

Delete Allowed

If both role and function execution rights are set to “Yes”, a user with this role may delete data in this function.

If the boolean for either the Role Execution Rights or the Function Execution ‘Allowed’ Rights are “No”, then the user will not be able to delete data in the function.

---

Notes #

Click to create a new notes page