Upload
ahmedmassoud2010
View
220
Download
0
Embed Size (px)
Citation preview
8/3/2019 Fundamentals of System Administration
http://slidepdf.com/reader/full/fundamentals-of-system-administration 1/26
Copyright © Oracle Corporation, 2002. All rights reserved.
Fundamentals of System Administration
8/3/2019 Fundamentals of System Administration
http://slidepdf.com/reader/full/fundamentals-of-system-administration 2/26
1-2 Copyright © Oracle Corporation, 2002. All rights reserved.
Course Objectives
After completing this lesson, you should be ableto do the following:
• Describe the 11i eBusiness Suite security model
• Define users
• Use Menu and Function security to modify
responsibilities
• Understand how Securing and Excluding attributes
work
• Describe and set profile options
8/3/2019 Fundamentals of System Administration
http://slidepdf.com/reader/full/fundamentals-of-system-administration 3/26
1-3 Copyright © Oracle Corporation, 2002. All rights reserved.
Agenda
• Understand application security
• Define users
• Understand responsibilities
• Understand menus• Set system and personal profile values
8/3/2019 Fundamentals of System Administration
http://slidepdf.com/reader/full/fundamentals-of-system-administration 4/26
1-4 Copyright © Oracle Corporation, 2002. All rights reserved.
Application Security Overview
Windows
ReportsUser
Oracle
Application
Responsibility
8/3/2019 Fundamentals of System Administration
http://slidepdf.com/reader/full/fundamentals-of-system-administration 5/26
1-5 Copyright © Oracle Corporation, 2002. All rights reserved.
Agenda
• Understand application security
• Define users
• Understand responsibilities
• Understand menus• Set system and personal profile values
8/3/2019 Fundamentals of System Administration
http://slidepdf.com/reader/full/fundamentals-of-system-administration 6/26
1-6 Copyright © Oracle Corporation, 2002. All rights reserved.
Defining a New Application User
Assign one or more
responsibilities
Enter user
name and password
Require password changeLimit access attempts
Enter user’sstart and end dates
1
2
3
4
5 Define buyers, salesforcecreate CRM resource
8/3/2019 Fundamentals of System Administration
http://slidepdf.com/reader/full/fundamentals-of-system-administration 7/261-7 Copyright © Oracle Corporation, 2002. All rights reserved.
Assigning Responsibilities to Users
Define
or modifyresponsibility
Excludefunctions
and menus
Defineapplication
user
Using PredefinedResponsibility
Using Custom Responsibility
Defineapplication
user
Defineor modify
components
1 2
1
Assign Assign
Define
or
Modify
8/3/2019 Fundamentals of System Administration
http://slidepdf.com/reader/full/fundamentals-of-system-administration 8/261-8 Copyright © Oracle Corporation, 2002. All rights reserved.
Agenda
• Understand application security
• Define users
• Understand responsibilities
• Understand menus• Set system and personal profile values
8/3/2019 Fundamentals of System Administration
http://slidepdf.com/reader/full/fundamentals-of-system-administration 9/261-9 Copyright © Oracle Corporation, 2002. All rights reserved.
Importance of Responsibilities
Responsibilities determine:
• Menus and forms you can access
• Reports you can run
• The set of books you’ll work with• Your operating unit
• Which types of applications you may access
8/3/2019 Fundamentals of System Administration
http://slidepdf.com/reader/full/fundamentals-of-system-administration 10/261-10 Copyright © Oracle Corporation, 2002. All rights reserved.
Components of a Responsibility
Request security
groupData group
Exclusions
Menu
8/3/2019 Fundamentals of System Administration
http://slidepdf.com/reader/full/fundamentals-of-system-administration 11/261-11 Copyright © Oracle Corporation, 2002. All rights reserved.
Defining a New Responsibility
Enter application and
responsibility name
Enter start and end dates
Select data group
Select menu
1
2
3
4
Select request group
Enter menu or function exclusions
5
6
Enter securing or excluding attributes7
8/3/2019 Fundamentals of System Administration
http://slidepdf.com/reader/full/fundamentals-of-system-administration 12/261-12 Copyright © Oracle Corporation, 2002. All rights reserved.
Menu Level 1
Menu Level 2
Menu Level 2
Function
Function
Function
Function
Function
Function
SubfunctionSubfunction
Subfunction
Menu Level 3
Menu Level 2
Function: A set of executable code
available as a menu
option
Subfunction: A subset
of a form’s functionality
Managing Function Security
8/3/2019 Fundamentals of System Administration
http://slidepdf.com/reader/full/fundamentals-of-system-administration 13/261-13 Copyright © Oracle Corporation, 2002. All rights reserved.
Menu Level 1
Menu Level 2
Menu Level 2
Function
Function
Function
Function
FunctionFunction
Function
Subfunction
Subfunction
Subfunction
Menu Level 3
Menu Level 2
Menu Level 1
Menu Level 2
Menu Level 2
Function
Function
FunctionFunction
Function
Function
Built into the menu.
Seen in Navigator.
Menu Displays in the Navigator
8/3/2019 Fundamentals of System Administration
http://slidepdf.com/reader/full/fundamentals-of-system-administration 14/261-14 Copyright © Oracle Corporation, 2002. All rights reserved.
Menu Level 1
Menu Level 2
Menu Level 2
Function-C
Function-E
Function-G
Function-F
Function-A
Function-B
Function-A
Function-D
Function-D
Menu Level 3
Menu Level 2
Function-H
Excluding a function affects the
function regardless of level.
Excluding a menu excludes allits child functions.
Excluding Functions and Menus
8/3/2019 Fundamentals of System Administration
http://slidepdf.com/reader/full/fundamentals-of-system-administration 15/261-15 Copyright © Oracle Corporation, 2002. All rights reserved.
Attribute Control and Web Inquiries
• Securing Attributes
– Users see only the information that matches the
assigned securing attribute values.
– Assign securing attributes to a responsibility to
secure rows.
– Assign securing attribute values to users.
• Excluding Attributes
– Hide specific database columns from users.
– Assign excluding attributes to a responsibility tosecure columns.
8/3/2019 Fundamentals of System Administration
http://slidepdf.com/reader/full/fundamentals-of-system-administration 16/261-16 Copyright © Oracle Corporation, 2002. All rights reserved.
Securing Attributes
Securing ValueCUST_ID = 1234
(XYZ Company)
Orders
Shipments
View Sales Orders
FUNC_VIEW_SO
Securing Attribute
CUST_IDInquiry Output
Dataflow
View
CUST_ID = 1000
CUST_ID = 1234
CUST_ID = 2000
Sales Order Summary
Item Customer
Monitor XYZ Co.
CPU XYZ Co.
Speakers XYZ Co.
Function
User
Responsibility
8/3/2019 Fundamentals of System Administration
http://slidepdf.com/reader/full/fundamentals-of-system-administration 17/261-17 Copyright © Oracle Corporation, 2002. All rights reserved.
Example of Securing Attributes
ICX_CUSTOMER_CONTACT_ID = 1001
Unsecuredquery output
Responsibilitysecured by
customer
contact
Secured
query output
Order
Num
Customer
Name
Order
Total
Customer
Contact1234 Air France 1,272.00 1001
1235 Air France 1,856.00 1200
1236 Air France 978.00 1001
1237 Air France 872.00 1153
Order Num
Customer Name
Order Total
Customer Contact
1234 Air France 1,272.00 1001
1236 Air France 978.00 1001
Products and Orders (by Customer Contact)
Secured by ICX_CUSTOMER_CONTACT_ID
8/3/2019 Fundamentals of System Administration
http://slidepdf.com/reader/full/fundamentals-of-system-administration 18/261-18 Copyright © Oracle Corporation, 2002. All rights reserved.
Excluding Attributes
Name,Cost Center,
Salary
View Employee Info
FUNC_EMP_INFO
Excluding AttributeICX_SALARY
Inquiry Output
Inquiry
View
NAME = SMITH
CC = 112
SALARY = 50000
Function
User
Responsibility
Name
SmithJonesHarris
Employee Info Summary
Cost Center
112114120
8/3/2019 Fundamentals of System Administration
http://slidepdf.com/reader/full/fundamentals-of-system-administration 19/261-19 Copyright © Oracle Corporation, 2002. All rights reserved.
Agenda
• Understand application security
• Define users
• Understand responsibilities
• Understand menus• Set system and personal profile values
8/3/2019 Fundamentals of System Administration
http://slidepdf.com/reader/full/fundamentals-of-system-administration 20/261-20 Copyright © Oracle Corporation, 2002. All rights reserved.
Defining a New Menu Structure
Identify menu needs
Print function security report for similar existing menus
Start with a blank menu form
Print a function security report set todocument the new menu
Build the menu from bottom to top
Plan the menu structure
Assign to the responsibility
8/3/2019 Fundamentals of System Administration
http://slidepdf.com/reader/full/fundamentals-of-system-administration 21/261-21 Copyright © Oracle Corporation, 2002. All rights reserved.
Menu Guidelines
• Design prompts with unique first letters (typing thefirst letter will automatically select it).
• Sequence the prompts with the most frequentlyused functions first.
• Entries cannot be copied from one menu definitionto another.
• Use acronyms only when an industry term or company word is so capitalized—for example, WIPor COGS.
• Use integers in numbering.
8/3/2019 Fundamentals of System Administration
http://slidepdf.com/reader/full/fundamentals-of-system-administration 22/261-22 Copyright © Oracle Corporation, 2002. All rights reserved.
Agenda
• Understand application security
• Define users
• Understand responsibilities
• Understand menus• Set system and personal profile values
8/3/2019 Fundamentals of System Administration
http://slidepdf.com/reader/full/fundamentals-of-system-administration 23/261-23 Copyright © Oracle Corporation, 2002. All rights reserved.
Setting Profile Hierarchy Levels
User
Responsibility
Application
Site
Printer: AtlantaAudit Trail: InactiveReport Copies: 1
Printer: Atlanta
Audit Trail: ActiveActive
Report Copies: 1
Printer: Atlanta
Audit Trail: InactiveReport Copies: 1
Printer: Boston
Audit Trail: Inactive
Report Copies: 2
Profile Options
Changed
at User
Level
Changed at
Application
Level
O v e r r i d
e s
8/3/2019 Fundamentals of System Administration
http://slidepdf.com/reader/full/fundamentals-of-system-administration 24/261-24 Copyright © Oracle Corporation, 2002. All rights reserved.
Setting System Profile Options
The system administrator can set profile options at any
level:
• Navigate to (N) Profile > System to see the Find
System Profile Values window.
• You can set a profile value at the user,
responsibility, site, or application level.
8/3/2019 Fundamentals of System Administration
http://slidepdf.com/reader/full/fundamentals-of-system-administration 25/261-25 Copyright © Oracle Corporation, 2002. All rights reserved.
Using User Profile Values
as Defaults
Window Field
Concurrent
ProgramsRequest Set
Key Flexfield
Segments
Descriptive
Flexfield Segments
Parameter Detail region—
Default Type/Default Value
Parameters
Report
Parameters
Segment
Segment
Default Type/Default Value
Validation Information region—
Default Type/Default Value
Form
Validation Information region—
Default Type/Default Value
8/3/2019 Fundamentals of System Administration
http://slidepdf.com/reader/full/fundamentals-of-system-administration 26/26
Summary
In this lesson, you should have learned how to:
• Describe the 11i eBusiness Suite security model
• Define users
• Use Menu and Function security to modifyresponsibilities
• Understand how Securing and Excluding attributes
work
• Describe and set profile options