Understanding Feature Function Security

Feature function security enables you to define user/role security down to the feature and field level to control access to entire features or individual fields within certain Order Management features.

This security feature is used for online processing only and can be used with the these functionality:

• Counter sales.

• Multiple payment methods.

• Alternate sources of supply.

• Margin adjustment.

• Short-term customers.

• Claimbacks.

• Sales order entry.

• Quote entry.

• Customer returns.

The system searches in this order for feature security definition:

• Users (operator)

• Roles

• Business units

• Installation Options (default)

When defining feature function security, you tell the system whether you want the entire feature or only certain functions within the feature defined at that security level (user, role, business unit, or installation). The lookup for feature security definitions considers each security definition independently. For example, you may define short-term customer security for your entire business unit, but define order entry for each user (operator ID). The system fetches each feature by first fetching the definition for the user. If the user is not found, it fetches the definition for the role. If the role is not found, it fetches the feature definition for the business unit. If the businesses unit is not found, it fetches the feature definition for the installation option. In another example, you may choose to define that only certain users have visibility to customer credit information on the sales order. You can define business unit level access for the sales order that does not display (hides) customer credit information fields on the sales order. You can then define specific sales order access down to the customer credit function for specific users that includes the display of customer credit information. At runtime, the system determines how to display those credit fields by first searching for the specific user level definitions. It finds a definition that is active for the customer credit function within the order entry feature and uses that for the individual user definitions. For all other functions and features, the system uses the business unit level definition.

See the product documentation for PeopleTools: Security Administration