Bookshelf Home | Contents | Index | Search | PDF

Security Guide for Siebel eBusiness Applications > Introduction >

Revision History

---

Security Guide for Siebel eBusiness Applications

Version 7.5.3

Table 1.  Changes Made in Version 7.5.3

Topic	Revision
Using Industry Standards	Added note about using Microsoft Crypto on different machines.
Changing Default Passwords	Added paragraph about limitations in the availability of the Password and Confirm Password fields when using external authentication. Added paragraph about the implications of changing passwords at both the Enterprise and Component level.
Configuring Siebel Enterprise for Microsoft Crypto or RSA Encryption	Moved content about keyfile exchange here from a previously separate section.
Configuring Siebel Enterprise or Siebel Server for SSL Encryption Configuring Siebel Web Server Extension for SSL Encryption	New for 7.5.3: Added sections about configuring Secure Sockets Layer (SSL) encryption and authentication for Siebel Server and Siebel Web Server Extension.
Configuring Web Clients for Encryption	Moved content about session cookies here from a previously separate section.
Business Component Encryption	Removed content about the Standard Encryptor, which is no longer supported. Added information about restrictions and requirements for encrypted field data and business component fields used for this purpose.
ADSI Adapter Requirements	Updated section on requirements for using the security adapter for ADSI.
Implementing LDAP and ADSI Security Adapter Authentication	Updated note about authentication issues for multiple Siebel client types.
Editing Parameter Values in the Application Configuration File	Updated description of PasswordAttributeType parameter.
Implementing Web SSO Authentication	Updated note about authentication issues for multiple Siebel client types.
Setting Up Web SSO: A Scenario	Updated description of Siebel Server and Application Object Manager in a Web SSO environment.
Editing Parameter Values in the Application Configuration File	Updated description of AllowAnonUsers parameter in application configuration file.
User Password Encryption	Updated note about password encryption utility. Added optional procedure step for modifying the AnonPassword parameter in the eapps.cfg file. Added information about how password encryption affects running Siebel Server components.
Credentials Password Encryption	Updated note about password encryption utility.
Adapter-Defined User Name	Deleted obsolete note about duplicating Siebel user ID data in a directory.
Secure Views	Updated description of effect of SecureBrowse parameter.
Password Expiration	Enhanced section to specify some requirements specific to ADSI, and to document using the parameter PasswordExpireWarnDays.
Changing the Active Position	Added note about relationship of data visibility and active position.
Access Control for Data	Added note about divisions and access groups.
Party Data Model	Added illustrations pertaining to data models for User List and Access Group parties. Added statement about promoting a contact to a user.
How Parties Relate to Each Other	Added information about the function of S_PARTY_PER and S_PARTY_REL tables.
Position-Based Access Control	In subsection on manager access control, deleted an incorrect note. Enhanced subsection on manager access control, primarily to add information about Manager List Mode.
Setting Up Organizations	Added information about the Employee Organization field for the Employee business component.
Setting Up Divisions	Updated description of Organization Type field.
Responsibilities	Revised for 7.5.3: Mentioned that default tab layouts are associated with responsibilities. Added note about requirement for restarting Application Object Manager after modifying visibility or responsibility settings.
Associating a Responsibility with Organizations	Added note about associating organizations with responsibilities.
View Access Control Properties	Added information about the view property Visibility Applet. Deleted incorrect note in subsection on manager access control.
Associating Access Groups with Data	Updated description of Cascade button.
Managing Tab Layouts Through Responsibilities	New for 7.5.3: Added new subsection about managing default tab layouts through responsibilities.
Creating and Administering Roles	Revised for 7.5.3: Updated section to remove references to managing tab layouts through roles. Default tab layouts are now managed through responsibilities.
Configuring Drilldown Visibility	Added information about drilldown visibility and visibility rules.
User Authentication Issues	Updated discussion of authentication requirements for using Server Manager.
Seed Responsibilities	Added reference to Release Notes for responsibilities provided in seed data.

Additional Changes

For Security Settings for the Web Browser, moved most of the content to a deployment chapter in Siebel Web Client Administration Guide.
In Access Control removed heading level "Supplemental Access Control" due to chapter restructuring. Added new section Additional Access Control Mechanisms to contain some of the content previously included under "Supplemental Access Control."
Removed former Chapter 10, "Siebel Application Configuration File Names."

January 2003 Bookshelf

Table 2.  Changes Made in Version 7.5, Rev. A for January 2003 Bookshelf

Topic	Revision
Bibliography of Security References	New section that lists outside resources for security-related issues. Includes books and Web sites.
Adding a Password for Updating Web Server Images	New section that describes security issues for Web server image caching.
Security Settings for the Web Browser	New section that describes how Web browser security settings impact Siebel applications.
Securing Siebel Reports Server	New section on securing communications with Siebel Reports Server.
Password Expiration	New section about how password expiration is handled by an external LDAP directory or Active Directory.
Configuring Drilldown Visibility	New section on how to configure drilldown visibility within a business object or between business objects.
Monitoring Application and User Activity	New section on how to monitor log files, usage records, and statistics pages to troubleshoot potential security problems.
Anonymous User Unregistered Users and Anonymous Browsing	Added clarification about the anonymous user requirement for applications that do not allow unregistered users.
Anonymous Browsing	Added information about the LoginView parameter and how it relates to the AllowAnonUsers parameter.
Siebel Application Configuration File Parameters	Added information about setting configuration file parameters for the Dedicated Web Client and Mobile Web Client.
Defining Responsibilities and Adding Views and Users	Added information about how to add new views to responsibilities if you are using a Dedicated Web Client or Mobile Web Client.
User Authentication Issues	Added troubleshooting information for "Web Authentication Failed" error messages.
RC2 Encryption Administration	Updated procedure for upgrading to the Siebel Strong Encryption Package.

Bookshelf Home | Contents | Index | Search | PDF