shivanand
28th June 2005, 14:00
Hi ,
How can i deny a super user from accessing one particular table .
For eg. I want the super user should not be able to see the table tfgld011.

dave_23
28th June 2005, 14:29
You can't with standard Baan.. you'd have to do something tricky at the DB level, but that would be likely to lead to fatal errors more than anything else.

Superusers are for admin personnel - regular (non-IT) users should (and can) just be regular users with the correct level of permissions set.

Dave

suhas-mahajan
29th June 2005, 13:31
Hmmm...Not understood your aim.

I think, planning to hide from BOSS :D

But you can use Flat file for reading/writting purpose, which can be hide and kept on server side under hidden folder.

Hope this helps.

regards,

-Suhas

Paul P
30th June 2005, 05:34
Don't make him/her super user

Rgds,
Paul

Rita Kotecha
4th July 2005, 15:37
Intresting !!

Can you explain me where exactly did you need this. Restricting Super user ??

shivanand
4th July 2005, 17:47
Hi,
This thing just came in my mind. Also the reason being , if you have your developers as super users and one doesnt want to allow them to view the finance tables /some important tables then this would come handy.

Rita Kotecha
4th July 2005, 17:53
Hi,

I feel the best to handle your query is create a role "Developers".

Assign the proper authorizations to the developers so that they can access tools module and the required tables and table fields. You can restrict the access to the table field which is very sensitive for this set of users.

But see that they are not super users.

shivanand
5th July 2005, 06:25
Ok thanxs for all the replies.

NPRao
5th July 2005, 22:38
Shivanand,
if you have your developers as super users and one doesnt want to allow them to view the finance tables /some important tables then this would come handy.
as Rita suggested you shouldnt have any Super Users on system than the BaaN Administrators, and the rest can be normal users with role authorizations.
How can i deny a super user from accessing one particular table .
You can always do that for any session irrespective of BaaN-normal/super-users, similar to the GTM.
Here is an idea-

Call the Check Password session - ttadv0145m000 in the before.program section in your program, and continue if successful, abort if failure.

-OR- write your own program which can do the password check based on package specific tables etc.