Tuesday, December 30, 2008

Is It Better To Wax After Or Before A Shower

AbanQ: Access Control


module "Access Control" can restrict access to desired information system. To do this you must create access control lists (ACL).
"mainwindows" hiding restricts access menu options. But does not restrict access to data if you use another way to reach them. That is, in the module "core" of "Area Billing if you block all clients except the menus, only show the menu "customers" but using the form for creating / editing of clients can be created / modified "Payment," Currency "," commercial agents "," Series of invoice, "" bank accounts "," Discount ", etc. . - The type of access control
"form"
restricts access to the forms of creating, editing and finding records.
- The type of access control
"table"
restricts access to the tables in the database. Procedure




From "System>> Access Control, groups are created first, then users and finally the access control lists.
In this case, create the group
"Sales" and the user

"sales"
belonging to this group. Users belonging to this group will have restricted access to certain data.

list is created access control "General" to which access is restricted
group "Sales"
to:
- Al "Financial Area" in all modules (flcontinfo, flcontppal ) with blanket permission "-" (No one can see the menus) Type "mainwindows."
- The Area "System" in all modules with global license "-" (No one can see the menus) Type "mainwindows."

- Al 'Area Billing module "Reports" (flfactinfo) with blanket permission "-" (No one can see the menus) Type "mainwindows.
- Al "Billing Area" module "Bill" (flfacturac) with blanket permission "-" (No one can see the menus) Type "mainwindows" and with specific permissions "rw" for:
agruparalbaranescli
agruparpedidoscli
albaranescli
busfactcli
facturascli lineasalbaranescli lineasfacturascli Lineaspedidoscli
lineaspresupuestoscli pedidoscli
presupuestoscli - Al "Billing Area" module "Warehouse" (flfactalma) with blanket permission "-" (No one can see the menus) Type "mainwindows."

- All forms (Form Type "Master" and "Edit") of "Area Billing" module "Warehouse" (flfactalma) in all tables with global permission "--".
- Al "Billing Area" module "Main" (flfactppal) with blanket permission "-" (No one can see the menus) with specific permissions "rw" (read and write) in the access control objects "customers" "Contactosclientes", "descuentosclientes" and "dirclientes." That is, in the "Area Billing" module "Main" can only see the Clients menu option, the rest are blocked.
- In the following tables "Area Billing" module "Main" (flfactppal) is allowed only to read (r-):
agents bancos_imp
contactosproveedores cuentasbanco cuentasbcopro cuentasbco_imp

departments descuentosproveedores discounts Currency descuentos_imp dirproveedores
divisas_imp

exercises
ejercicios_imp
company formaspago
formaspago_imp
gruposclientes tax
impuestos_imp


intervals
countries paises_imp

time sequences

secuenciasejercicios providers
series_imp

series branches
tiposrappel


NOTE:
missing tables of "Area Billing" module "Main" correspond to Customers. Could change the type of access control for Form Table but needs to add two rules (Form Master and Edit) for each table.

Once the list Access Control is installed with
button "Install"
. We have created several access control lists can be installed but only one list at a time.

Once created and installed the access control list must be created the same users on the database server (PostgreSQL or MySQL). In the case of MySQL, users must have permission
"SELECT, INSERT, UPDATE", "CREATE"
. To create users from the mysql console run the following command as desired:

GRANT SELECT, INSERT, UPDATE ON TO usuario_mysql base_de_datos_abanq .* @ localhost IDENTIFIED BY 'password_del_usuario';
GRANT SELECT, INSERT, UPDATE ON TO usuario_mysql@maquina1.mi-red-local.org base_de_datos_abanq .* IDENTIFIED BY 'password_del_usuario';


More information:

abanq.org





0 comments:

Post a Comment