Security
The
concept behind the security in EFFICIENCY is simple though comprehensive
- some users should be allowed to do some things and others should
not. The set
of processes and functions a user is allowed to perform is called
user's permissions.
Unlike many systems, EFFICIENCY
defines the user and user groups which controls the permissions
related to database access and the executives and executive groups
which controls the EFFICIENCY's functional and application permissions.
The user and user groups is a control mechanism to access the data,
the Executives and the Executive Groups is the control mechanism
accessing to the EFFICIENCY functions and processes.
Special prices, budgets, historical data, performance
analysis, scheduling, access groups etc are all related to the executives.
The 'User' is merely another functional attribute of an executive.
Log-in
Permissions
Log-in
permission to the database is controlled jointly by the Database
Manager and the Efficiency Security Manager by the user ID and password.
This information can be cryptic, hidden or accessed through a Firewall.
Functional
Permissions
Executives
and Executive Groups can be attributed to various Access Groups
which in turn are assigned to data such as client transactions,
quotations, orders etc. The Executives can only access data with
the matching Access Groups. This allows for horizontal data segmentation
so only a select group of executives have access.Executives can
have limited access to certain functions such as limitations on
cost prices, transactions of the other executives, limitations on
the maximum quotation values, or minimum sell prices etc.
Application
Permissions
EFFICIENCY
Security System stores security-related information about EFFICIENCY
application. This information includes identification of:
•
Individual users and groups of users;
•
EFFICIENCY objects such as windows, controls
that are being secured;
•The
type of access allowed to each secured object by a specific user
or user group
•The
database columns that are being secured
•The
type of access allowed to each secured database column by a specific
user or group.
At runtime, EFFICIENCY checks the user's application
and functional permissions programmatically. If certain command buttons,
columns or menu items do not apply, those items are either disabled
or invisible. |