Kbase P54702: How to Setup the Grant Security Model Without Locking Out the Admin User
| Autor |
Progress Software Corporation - Progress |
| Acesso |
Público |
| Publicação |
16/10/2008 |
|
Status: Unverified
GOAL:
How to Setup the Grant Security Model Without Locking Out the Admin User
GOAL:
In the new Grant/Revoke model for security in Dynamics there is the danger of switching to the grant model but locking out the admin user as a result.
FACT(s) (Environment):
Dynamics
Dynamics 2.1
FIX:
There are 2 flags to be aware of: the one that enables/disables security
(check-box at the top of the security control screen), as well as the
grant/revoke radio-set.
When you switch to the Grant model, security will automatically be disabled,
and cannot be re-enabled until some access has been granted to a user. The
catch is that you really want to allocate access to *everything* for one
user - usually 'admin'. The tool does not protect you from allocating
insufficient access, so there is the potential to have all users locked out
from important functions.
I think the best approach is to:
1. Make a backup of icfdb
2. disable security
3. change to model = grant
4. go through ALL of the items under Security Allocations (Actions, Fields,
Containers, Menu items, etc.) and grant access to everything for user
'admin'
5. enable security
Before anything else...
6. Do some testing under user 'admin' to ensure that everything works
correctly for that user, especially that they can get to Security Control
and use it ok