Security

User Security

User security is defined in the Administrative Console in through security roles assigned to users. The Manage Security Roles, Manage Users, and Assign Security Roles plugins can be used to create security roles and assign to users.

Security Codes

Values populating the Security Code drop-down on the SI Create/Update Orders (SIOEUB) page are derived from the SI Security Codes (SIUPCD) page.

These security codes are also available for selection in NU Manage Users to set a default SI security code for a user, so that the Sec Cd field in SIOEUB is automatically populated with the security code when the user enters a new order.

By default, the security code field is not a required field on SIOEUB. This can be changed at the page level by making the Sec Cd field required. Most clients restrict the security code field to ensure users are unable to change or remove the security code value by using the security codes in filters set up in the Common Security Settings in Manage Security Roles in the Administrative Console.

The below example filters the Sec Cd field to only display a JFSC security code named JFSC:

Workflow

When clients use Workflow to process SIOEUB orders, it can be configured to run the order through an approval process. The process can send the SI order to approvers based on location, security codes, etc. When the order is approved, a new record is inserted into the siv_aprv_dtl table.

When pick tickets are first printed (SIOEPK, SIOEPR), the system checks the siv_aprv_dtl table to confirm a record exists for the SI Order ID. If there is a Sec Cd set without an approval record, the print job will fail. SIOEFL will complete correctly with the combination of Sec Cd and siv_aprv_dtl record or when SIOEFL has no Sec Cd. However, if there is a Sec Cd but no approval record, an error will occur reporting an "incomplete approval for order."

Once confirmed, the print pick ticket process completes successfully. If no record is found, the Order Processing job will still show as completed, but it will report an error on the tail sheet saying the order has an incomplete approval.

Security Codes and Processing

If Workflow is not used, users can fill an order (SIOEFL) without approval if the order does not have a security code. If it does have a security code, the system will look for a record for the SI Order ID in the siv_aprv_dtl before filling the order. If no record is found, the SIOEFL process will fail, reporting an incomplete approval for the order.

When an order is printed using SIOEPK or SIOEPR, the si_order_pick_no field is filled out in the si_order_mstr table. Whenever SIOEPK or SIOEPR is launched, the system checks to see if the order has already been printed by checking the si_order_pick_no field. If the field has a pick number value, the print job will complete but the tail sheet will report that the order's pick ticket was already printed.