Administration > Security > Roles > Role Program Access Maintenance

Role Program Access Maintenance

You use this program to selectively assign the program access levels you require for a specific operator role.

These settings are applied to the operators assigned to the role, so you can restrict operator access to specific programs.

These access restrictions can be assigned using operator groups when not using roles (see Groups).

Toolbar and menu

Field Description
Configuration  
Copy From Another Configuration Select this to copy the Program access settings from another role or from an operator group to the currently displayed role (see Copy Selected Configuration).
Role Indicate the role for which you want to maintain program access settings.
Organogram Select this to use the Role Organogram Maintenance program to view and manipulate the hierarchy of roles (organorgam) for your organization.

Copy Selected Configuration

This screen is displayed when you select the Copy From Another Configuration option from the Configuration menu.

This enables you to copy the Program access settings from another operator group or from another operator role to the currently displayed role.

If you selected the option: Access control by company within role (Roles - Global Configuration), then you can copy the Program access settings from a role in a different SYSPRO company.

Field Description
Copy Configuration Select this to copy the Program access settings for the operator role or group currently highlighted in the listview to the currently displayed role.

When you select this option, you are prompted to confirm the copy. When you confirm the copy, the current Program access settings for the role are replaced by the Program access settings for the role/group you highlighted in this listview.

Close Select this to return to the previous screen.
Type Program access can be defined by operator group (Groups) or by operator role (Role Program Access Maintenance). This indicates whether the code displayed in the listview is an operator group or an operator role.
Code This indicates the code of the operator group or operator role.
Company This indicates the code of the SYSPRO company in which the role exists.

This is only displayed if you selected the option: Program access by company within role (Roles - Global Configuration).

Where this column is blank, it indicates that the role is defined in the current company.
Name This indicates the description defined against the operator group or the operator role.

Program Access

You use this listview to selectively assign program access levels for operators assigned to the role. Details of SYSPRO modules and programs are displayed in this editable listview.

This pane is disabled if you have indicated that the operator is a System administrator. The reason is that System administrators have unrestricted access to the system.

When new SYSPRO programs are added to SYSPRO, the default security level is set to Denied for non-browse programs and to Browse only for browse programs.

Field Description
Allow Access to all Select this to grant the role access to all programs.
Deny Access to all Select this to deny the role access to all programs.

This is useful if you want to grant the role access to only a few programs in the listview. Once access is denied to all programs, you can select the individual programs to which you want to grant the role access.
Program This indicates the program code.
Access allowed

Indicate the access level to the corresponding program for the role.

Select this to indicate that the role has full access to the program. This includes access to the maintenance functions on browse programs.

When you allow access to a program, the Job logging required option is automatically selected if the option: Job logging required (Company Maintenance) is enabled.

If this option is not selected, it indicates that the role has no access to the program. The operators in the role are unable to run the program. However, if the program is a Browse type program, you can still give operators Browse only access.
Browse

The word 'Yes' in this column indicates that the program is a Browse program.

Browse programs are typically the setup programs which enable you to view information for key fields such as suppliers, customers, ledger codes, banks, currencies, stock codes, etc. From the setup type browse programs, you can also select to maintain the information.

The word 'No' in this column indicates that the program is a non-browse program.

Non-browse programs typically enable you to process transactions, set options and perform functions such as paying a supplier, invoicing a customer, performing a stock take, etc.
Module This indicates the module in which the program resides.
Description This indicates the description of the program.
Browse only access

Select this to indicate that the role has access to viewing information in the browse program only. Access to the maintenance functions (e.g. Add, Change, Delete) is disabled.

This option is available for browse programs only and is therefore only enabled if the word "Yes" is displayed in the Browse column.
Job logging required

This column indicates whether job logging is enabled for the role for that program.

Job logging can only be enabled if you selected the setup option: Job logging required (Company Maintenance) and you selected Access allowed against the program.

Program Access Options Using the Mouse Pointer

Security access can be configured selectively by program (see Set security selectively by program) and selectively by module (see Set security selectively by module).

These options are displayed when you right click on one or more highlighted lines in the Program Access listview. You can use the Ctrl and Shift keys together with your mouse pointer to individually highlight lines.

Field Description
Allow Access Select this to allow access to all programs currently highlighted in the listview and, if you selected the setup option: Job logging required (Company Maintenance) set job logging on for all those programs.
Allow Access To Module Select this to allow access to all programs in the currently highlighted module. In addition, if you selected the setup option: Job logging required (Company Maintenance) then job logging is set on for all programs in the currently highlighted module.
Deny Access Select this to deny access to all programs currently highlighted in the listview.
Deny Access To Module Select this to deny access to all non-browse programs in the currently highlighted module and set all browse programs to browse only.
Set Job Logging On for All

Select this to set job logging on for all programs in the currently highlighted module.

This only applies if you selected the option: Job logging can only be enabled if you selected the setup option: Job logging required (Company Maintenance) and you selected Access allowed against the program.
Set Job Logging Off for All Select this to set job logging off for all programs in the currently highlighted module.
Copy To Other Roles Select this to use the Role Program Global Changes program to copy the Program Access settings currently highlighted in the listview to other roles.

Notes and warnings

Restrictions and limits

  • If the activity: BOM Access to Structure & Routings (Operators) is denied, then the role cannot access the Structures and Routings program, irrespective of your settings against the Structures and Routings program here.

  • Operators assigned to a System administrator group (Groups) have unrestricted access to the entire SYSPRO system and are therefore not restricted by any role program access.

Coding considerations

  • If you deny access to a program that appears in more than one module, then access to the program is denied in all modules.

  • Where the Browse programs (listviews) and Maintenance programs are split into two programs, each have their own security access settings. You need to consider this when setting the security for the Maintenance program, as you could have a situation where the security is set up to disallow access to the Browse program but access to the Maintenance program can be gained by from the SYSPRO Desktop (SYSPRO Button->Run a Program). Therefore, to deny access to the Maintenance program, you need to set access to the Browse program to Browse only, and access to the Maintenance program to Denied.

Set security selectively by program

This task describes how you can apply security to a group of programs.

  1. Hold down the Ctrl key and use your mouse pointer to select the individual programs in the Program Access listview to which you want to apply security.

    Alternatively, use the Shift key to select a consecutive number of programs.

  2. Typically use your right mouse button to select the access level required for the programs you highlighted as follows:

    • Allow access
    • Deny access
    [Note]

    If you select the Allow access to module or Deny access to module options, then that option is applied to all programs in the module(s) currently highlighted and not only to the programs that are highlighted.

  3. Save your settings.

Set security selectively by module

This task describes how you can apply security to all programs within a module.

  1. Typically right-click your mouse pointer on a module in the Program Access listview and select the option(s) you want to apply to all the programs for the currently highlighted module.

    These options include:

    • Allow access to module
    • Deny access to module
    • Set job logging on for all
    • Set job logging off for all

  2. Save your settings.