HP 3000 Manuals HP 3000 Manuals
Security Dependent on Data Value
For greater control of the data available to different groups of users or
departments, HP ALLBASE/BRW provides data-value-dependent security. You
can define one report and several selection sets, one for each user
group, and secure each department's data with a password. This restricts
the data that can be selected by a specific group. The complete data
selection, including a selection set for each group of users, is defined
when the report is specified and compiled. When the report is executed,
the same selection set is always used by a particular group.
Example:
The following final access table has data for four departments:
--------------------------------------------------------------------------------------------
| |
| DEPT ACCT MONTH EXPENSE |
| |
--------------------------------------------------------------------------------------------
| |
| ADMIN 13 X X |
| |
| ADMIN 14 X X |
| |
| ADMIN 15 X X |
| |
| MKTG 16 X X |
| |
| MKTG 17 X X |
| |
| MKTG 18 X X |
| |
| PROD 22 X X |
| |
| PROD 22 X X |
| |
| PROD 22 X X |
| |
| SALES 44 X X |
| |
| SALES 45 X X |
| |
| SALES 46 X X |
| |
--------------------------------------------------------------------------------------------
The shaded areas on the table are records from the Administrative
Department and from the Production Department.
To secure the resulting report so that users in the Administrative
Department and the Production Department can access only their respective
department's data, data selection can be defined as follows.
* At the Parameter screen, define the parameters listed below:
------------------------------------------------------------------------------------------
| |
| Parameter Result Type Type |
| |
------------------------------------------------------------------------------------------
| |
| department string single value |
| |
| account string comparison predicate |
| |
| month integer single value |
| |
------------------------------------------------------------------------------------------
* Go to the Define Selection screen and create Selection Set named
ADMIN and one named PROD. (Do one first, and copy it for the other
one.)
* Define a default value of ADMIN or PROD for the Parameter
DEPARTMENT (depending, of course, on which department selection
set you are creating).
* Type an asterisk (*) in the far right of the Default Value field
for DEPARTMENT. This means that the value is frozen and cannot be
overridden when the report is requested.
* Type an R in the far right of the Default Value field for MONTH.
This means that a value for MONTH must be entered when the report
is requested.
* Type the appropriate printer information. Remember, you can send
the printing to the print device nearest each department. You
don't need to specify the same printer. Also, you could need a
different number of copies for each department. That, too, could
be defined here.
The selection set ADMIN, defined for the Administrative Department, is
shown here:
![[]](../../pic3k/M011795/FFN1263c50.gif)
where department is frozen, account is optional, and month is required
(since the report cannot find data without it).
* For these selection sets, type this calculation for the defined
parameters at the Selection Condition screen:
![[]](../../pic3k/M011795/FFN1273c50.gif)
When compiled with the ADMIN selection set, the report is restricted to
records for the Administration department. When compiled with the PROD
selection set, the report contains only information for the Production
Department.
When the report is compiled for the Administrative Department, the
entries on the Compile Report screen are:
![[]](../../pic3k/M011795/FFN1283c50.gif)
When the report is compiled for the Production Department, the entries on
the Compile Report screen are:
![[]](../../pic3k/M011795/FFN1293c50.gif)