Maximo Advanced Security Configuration – Data Limitations

Advanced Security Configuration – Data Limitations

Data limitations are part of setting up security groups and can be found in the Jump to list under Security> Security Groups. Data restrictions can be set for any of the groups on the Data Restrictions tab, and can be used in:

– Restricting visibility to all objects – This will be used to limit users from viewing a particular purchase order, for example, for other departments
Visibility to certain features – This is used to prevent certain users from displaying certain details of certain records
– Restrict group visibility – Restrict specific users to only specific groups of items or companies

Before setting up data restrictions it is necessary to set up conditional expressions.

Determining Conditional Expressions

Conditional expressions are created from the conditional expression management application and can be found in the Go to menu under Administration> Conditional Expression Manager. The conditional expression consists of the following details:

Attribute – Description
Status Code – Reference Code
Description – Brief Description
Type A, either Class or EXPRESSION SQL expression
SQL expression – where the statement contains the condition in which the expression is positive or negative
Class – This is the reference to the Java class that should be called through this Express Conditional Express
Of the check mark for complex expressions that include a review of other fields. This way, the field will be reassessed when changes to other fields occur. Revaluation contains the amount of processing handled.
Reference Number – This is a read-only field that gives details about the number of times that this condition is used in certain areas of the system.

Data Restriction Application

Data restrictions are applied in the application of security groups on a data restriction application. – Object limitations
– Limitations of the object

– Limitations of the object

Object limitations

The Object Restrictions tab is used to create controls against objects such as work orders, Purchase order or items. The following fields include:

Attribute – Description
Object – Object Name
Application – The name of the application to which the restriction should be applied, if left blank, will be applied to all applications
:
– READONLY – Object that satisfies the condition will be displayed but will be read only
– HIDDEN – Object will not be displayed in application
– QUALIFIED – Object will not be displayed in applications or searches
As stated above
Condition – The condition to be used for this restriction. All objects that meet the condition will be restricted.

Attribute Restrictions

Attribute restriction is used to hide a specific attribute, such as the employment rate, or the total contract value.
Attribute – Description
Object – Object Name to Restrict
Attribute – Attribute Name to Restrict
Application – Application name to which the restriction should be applied If left blank, Type – This field includes the following options:
– READONLY – The attribute that satisfies the condition will be displayed but will be read only
– HIDDEN – Attribute will not be displayed
– Required – The attribute that satisfies the condition will be displayed
] Revaluation – Same as above
Condition – The condition that will be used for this limitation. All objects that meet the condition will be restricted.

Collection Restrictions

The Group restriction tab is used to give the group access to specific groups.

Example – Set conditional expression to make the purchase orders of a particular resource read-only for a particular group:

1. Go to the conditional conditions management application
2. Create a new conditional expression by clicking the new button and adding the following details:
a. Status Code – POREADONLY
b. Description – Seller Read Only
c. Type -EXPRESSION
Expression -: VENDOR = "ATI"
e.
4. In the Data Restrictions tab, select the Object Restrictions
tab. 5. Create restrictions by clicking the New Row button And add the following details:
a. Object – PO
b. Application –
c. Type – READONLY
Dr. Status – POREADONLY

Login with a user who is part of this group and you find that all purchase orders for the ATI vendor are read-only.



Source by Kelly Tuyen Vo