Security Administration Implementation
This section discusses:
Preparing to use PeopleSoft security.
Administering security from applications.
Reviewing and monitoring your security implementation.
Preparing to Use PeopleSoft Security
The functionality of security administration for your PeopleSoft applications is delivered as part of the standard installation of PeopleTools, which is provided with all PeopleSoft products.
To start administering security, install your PeopleSoft application according to the installation guide for your database platform.
Other Sources of Information
This section provides information to consider before you begin to manage your data. In addition to implementation considerations presented in this section, take advantage of all PeopleSoft sources of information, including the installation guides, release notes, and product documentation.
Administering Security from Applications
If you administer security information outside of the PeopleSoft security interface, for example, using application-specific pages to define application security, then you have the option of modifying the PeopleSoft security pages to include links to those application-specific pages. These links provide administrators a convenient way to access application-specific security pages without having to spend time navigating to them.
You add the extra security links from a browser by selecting. You can add links to the User Profiles component, My System Profile page, the Role component, or the Permission List (ACCESS_CNTRL_LISTX) component. To add links to a security profile, select the appropriate page in the Security Links (SEC_OTHER_SETTINGS) component and add the link information for the target page. After you save the link information, the link appears on the Links page for the appropriate security profile.
Image: Security Links - User page
This example illustrates the fields and controls on the Security Links - User page.
- Active Flag
Enables you to activate and deactivate links. Only those links with the Active Flag selected appear for system users.
Add a description of the page that contains the extra security information. This description is the text that appears on the Links page for the security profile.
- Menu Name
From the drop-down list, add the menu name. This value is the application in which the page resides, such as Administer HR Security.
- Menu Bar Name
From the drop-down list, add the menu bar name, such as Use, Setup, Process, and so on.
- Bar Item Name
From the drop-down list, add the bar item name. For example, the bar item name for this page is Security Links.
- Item Name
From the drop-down list, add the item name. For example, the item names for this component are User, Role, My Profile, and Permission List.
After you have added all the appropriate information, use this link to test the security link. If it does not work correctly, double-check your selections for the previous options.
To add a Security Link:
Select the security profile type (user, role, or permission list) to which you want to add extra links.
If links exist, click the plus sign button to add a new row.
Add the appropriate link information (Menu Name, Menu Bar name, and so on).
After you enter the appropriate link information, click Test to make sure the link points to the correct target.
Save your work.
Note: If you need to migrate the security links setup data from one database to another, you can use the following Data Mover scripts: SECOTHER_EXPORT.DMS and SECOTHER_IMPORT.DMS. These scripts reside in the PS_HOME\scripts directory.
Reviewing and Monitoring Your Security Implementation
PeopleSoft provides a collection of predefined queries that enable you to review, monitor, and audit system access by user, role, and permission list so that you can detect discrepancies. The Common Queries page enables you to run the following sets of queries:
User ID queries.
Permission list queries.
PeopleTools objects queries.
Definition Security queries.
Access log queries.
To run a query, click the link, enter the appropriate criteria (such as User ID), and click View Results.