The Security Role block contains:

• Security Role
• Creation Date
• Description

  Buttons

  • Form Grants
    • Form Grants
    • Form (LOV)
    • Title
    • Grant Query Only check box
    • Back button
  • Job Grants
    • Job Name (LOV)
    • Short Title
    • Override Priority check box
    • Back button
  • Self Serve Application Grants
    • Self Serve Application (LOV)
    • Description
    • Back button
  • SSF Menu Grants
    • SSF Menu Code (LOV)
    • Description
    • Default SSF Menu check box
    • Search Menu check box
    • Back button
  • Web Page Grants
    • Web Page
    • Description
    • Grant query Only check box
    • Back button
  • Web Resource Grants
    • Web Resource
    • Description
    • Grant query Only check box
    • Back button
  • Copy From ...
• Person ID
• Oracle Username
• Copy button
• Cancel button
• Reconcile Object Grants (SECJ0070)
• Advanced Functions
  • Advanced Function (LOV)
  • Description
  • Back button
• Note Type Restrictions (SECF0041)
• Appeal Type Restrictions (SECF0091)
• Encumbrance Type Restrictions (SECF0093)
• Communication Category Restrictions (SECF0073)
• Proposal Type Restrictions (SECF0095)

The Security Role Menu Grant block contains:

• Menu code
• Title
• Default Menu check box

  Button

  • Grant Menu Structure

Rules/Notes:

Form Grants
This block is used to record and display forms granted to a person in addition to those granted as a result of the person's Security Role(s). Use the Back button to exit this block.

Web Page Grants
This block is used to record and display web pages granted to a person in addition to those granted as a result of the person's Security Role(s). Use the Back button to exit this block.

Web Resource Grants
This block is used to record and display web resources granted to a person in addition to those granted as a result of the person's Security Role(s). Use the Back button to exit this block.

Copy From ...
This function permits the copying of the menu, form and Job Grants of one person to another person. The recipient will then have access to functionality specified by their own Security Role grants, those menus, forms and jobs copied from the other person and any additional menus, forms and jobs explicitly recorded in this form.

Advanced Functions
System-defined Advanced Functions can be added or removed for a Security Role in this form.
For example, if a NAME-UPD Advanced Function is granted to a Security Role, users with that role will not be able to update a Person's name in any SMS form. The only exception to this restriction will be cases where the creator of a Person record attempts to change the Person Name on the same day that the record was created.

Some System Advanced Functions are VET specific and some are HE specific. Cross sector installations of Callista will have all Advanced Functions available for selection in this form.

Note that granting the VENUE_OVRD Advanced Function to a user role, will allow a user with that role to allocate further students to Activity Offerings in Venues, when the designated maximum number of students for that venue has been reached. This Advanced Function should only be granted to roles whose users that will appreciate the Occupational Health and Safety implications of such an action. Allocation of students to Activity Offerings can be performed in ENRF4200. A user whose role has been granted the VENUE_OVRD Advanced Function is able to select the Exceed Real Limit check box in this form.
The maximum number of students in an Activity Offering is designated in CRSF2800.

Granting the CLASH-OVRD Advanced Function to a Security Role will allow a user with that Security Role to deselect the No Clashes Allowed checkbox in ENRJ4700 and allow them to select the Clashes Override checkbox in ENRF4200 and ENRF4250.

For a summary of Advanced Functions available in Callista - go to the Advanced Functions page.

The Grant Menu Structure button opposite copies data ready for SECJ0070. Once copied the following message is shown: "Grants successfully copied. Please requery detail to see the changes. Database Object Grants should be reconciled via the Reconcile Object Grants button.".

The Note Type Restrictions button is only available to users who have security access to SECF0041.

The Appeal Type Restrictions button is only available to users who have security access to the Maintain Security Appeal Type Restriction (SECF0091) form.

The Encumbrance Type Restrictions button is only available to users who have security access to the Maintain Security Role Encumbrance Type Restrictions form (SECF0093). SECF0093 is used to control the type and level of access a role has in managing encumbrance processes. For more information, see SECF0093.

The Proposal Type Restrictions button is only available to users who have security access to the Maintain Proposal Type Restrictions form (SECF0095). SECF0095 is used to control the type of proposal that a user with a particular security role can create.

• Locate the Security Role for which access is to be granted by querying in the Security Role block.
• Navigate to the Security Role Menu Grant block.
• Enter Insert mode.
• Select the menu to be granted from the list of values (or key a valid value) in the Menu Code field of a blank record.
• If this menu is to be the default menu for the Security Role, select the Default Menu check box.
• Save.

Rules/Notes:

All required menus including sub-menus must be granted via this form.

Only one menu can be flagged as the default menu.

To grant access to a menu and all its menu substructure including sub menus, forms and jobs, for the displayed Security Role, using the Maintain Security Role Function Grants form:

• Locate the Security Role for which access is to be granted by querying in the Security Role block.
• Navigate to the Security Role Menu Grant block.
• Select the menu whose structure is to be granted, from the displayed Menu Grants, or
• Grant the menu whose structure is to be granted using the method detailed above.
• Select the menu whose structure is to be granted, then select the Grant Menu Structure function button.
• All sub menus, forms and jobs of the selected menu will be granted.
• Select the Reconcile Objects button or run SECJ0070.

Rules/Notes:

On executing the Grant Menu Structure function, the granted menu structure is automatically saved.

To display the granted sub-menus it is necessary to re-query the Security Role Menu Grant block. To display the granted forms and jobs, it is necessary to navigate to the Form Grant and Job Grant blocks and re-query.

To grant a Security Role access to a form, using the Maintain Security Role Function Grants form:

• Ensure the correct Security Role record is displayed in the Security Role block.
• Select the Form Grants button to display the Security Role Form Grant block.
• Enter Insert mode.
• Select the form to be granted from the list of values (or key a valid value) in the Form field of a blank record.
• If access is to be granted to the form for inquiry use only, select the Grant Query Only check box.
• Repeat steps 4 and 5 to grant more forms to the Security Role.
• Save.
• Select the Back button.
• Select the Reconcile Objects button or run SECJ0070.

Rules/Notes:

Only forms with their Query Only Mode Valid indicator set (in SECF0060) can be granted as 'query only' in this form.

To remove a Security Role's access to a form, using the Maintain Security Role Function Grants form:

• Ensure the correct Security Role record is displayed in the Security Role block.
• Select the Form Grants button to display the Security Role Form Grant block.
• Select the form for which access is to be deleted.
• Delete record.
• Save.
• Select the Back button.
• Select the Reconcile Objects button or run SECJ0070.

Rules/Notes:

To grant a Security Role access to a job, using the Maintain Security Role Function Grants form:

• Ensure the correct Security Role record is displayed in the Security Role block.
• Select the Job Grants button to display the Security Role Job Grant block.
• Enter Insert mode.
• Select the job to be granted from the list of values (or key a valid value) in the Job Name field of a blank record.
• If a person with this Security Role has the authority to override the System priority of this job, select the Override Priority check box.
• Repeat step 4 and 5 to grant more jobs to the Security Role.
• Save.
• Select the Back button.
• Select the Reconcile Objects button or run SECJ0070.

Rules/Notes:

To remove a Security Role's access to a job, using the Maintain Security Role Function Grants form:

• Ensure the correct Security Role record is displayed in the Security Role block.
• Select the Job Grants button to display the Security Role Job Grant block.
• Select the job for which access is to be deleted.
• Delete record.
• Save.
• Select the Back button.
• Select the Reconcile Objects button or run SECJ0070.

Rules/Notes:

To grant a Security Role access to a Self Serve Application, using the Maintain Security Role Function Grants form:

• Ensure the correct Security Role record is displayed in the Security Role block.
• Select the Self Serve Application Grants button to display the Security Role Self Serve Application Grant block.
• Enter Insert mode.
• Select the Self Serve Application to be granted from the list of values (or key a valid value) in the Self Serve Application Name field of a blank record.
• If a person with this Security Role has the authority to override the System priority of this Self Serve Application, select the Override Priority check box.
• Repeat step 4 and 5 to grant more Self Serve Applications to the Security Role.
• Save.
• Select the Back button.
• Select the Reconcile Objects button or run SECJ0070.

Rules/Notes:

A function for Callista Connect users.

When creating a Role Self Serve Application Grant, the Self Serve Application must be mapped to a System Self Serve Application that is not closed.

To remove a Security Role's access to a Self Serve Application, using the Maintain Security Role Function Grants form:

• Ensure the correct Security Role record is displayed in the Security Role block.
• Select the Self Serve Application Grants button to display the Security Role Self Serve Application Grant block.
• Select the Self Serve Application for which access is to be deleted.
• Delete record.
• Save.
• Select the Back button.
• Select the Reconcile Objects button or run SECJ0070.

Rules/Notes:

See Rules/Notes on 'Advanced Functions' button above for conditions to deny a person access to update a person's name in any SMS form.

To grant a Security Role access to a SSF Menu, using the Maintain Security Role Function Grants form:

• Ensure the correct Security Role record is displayed in the Security Role block.
• Select the SSF Menu Grants button to display the Security Role SSF Menu Grant block.
• Enter Insert mode.
• Select the SSF Menu to be granted from the list of values (or key a valid value) in the SSF Menu Name field of a blank record.
• If this menu is to be the default SSF Menu for this Security Role, select the Default SSF Menu check box.
• Repeat step 4 to grant more SSF Menus to the Security Role.
• Save.
• Select the Back button.
• Select the Reconcile Objects button or run SECJ0070.

Rules/Notes:

A function for Callista Connect users.
When creating a Role SSF Menu Grant, the Web Element must have a System Web Element Type of Menu.
The Web Element must not be closed when creating a Role SSF Menu Grant.
One and only one Role SSF Menu Grant must be set as the Default SSF Menu for the Role.

• Ensure the correct Security Role record is displayed in the Security Role block.
• Select the SSF Menu Grants button to display the Security Role SSF Menu Grant block.
• Select the SSF Menu for which access is to be deleted.
• Delete record.
• Save.
• Select the Back button.
• Select the Reconcile Objects button or run SECJ0070.

To grant a Security Role access to a web page, using the Maintain Security Role Function Grants form:

• Ensure the correct Security Role record is displayed in the Security Role block.
• Select the Web Page Grants button to display the Security Role Web Page Grant block.
• Enter Insert mode.
• Select the web page to be granted from the list of values (or key a valid value) in the Web Page field of a blank record.
• If access is to be granted to the form for inquiry use only, select the Grant Query Only check box.
• Repeat to grant more web pages to the Security Role.
• Save.
• Select the Back button.

Rules/Notes:

Only web pages with their Query Only Mode Valid indicator set (in SECF0060) can be granted as 'query only' in this form.

To remove a Security Role's access to a web page, using the Maintain Security Role Function Grants form:

• Ensure the correct Security Role record is displayed in the Security Role block.
• Select the Web Page Grants button to display the Security Role Web Page Grant block.
• Select the web page for which access is to be deleted.
• Delete record.
• Save.
• Select the Back button.

Rules/Notes:

The Web Resource Grants button - overlay contains:

• Web Resource
• Description
• Grant Query Only check box
• Back button

To grant a person access to a web resources, using the Maintain Person Function Web forms form:

• Ensure the correct person record is displayed in the Person block
• Select the Web Resource Grants button to display the Person Web Resource Grant block
• Enter Insert mode
• Select the web resource to be granted from the list of values (or key a valid value) in the Web Resource Name field of a blank record
• Repeat to grant more web pages to the person
• Save
• Select the Back button

Rules/Notes:

A person will only have access to those web resources specified here and by their Security Role grant(s).

A person may be granted web resources without necessarily being granted menus containing those jobs. In such cases, the jobs can be selected via the Go To and Alpha List facilities.

To remove a person's access to a web resource, using the Maintain Person Function Grants form:

• Ensure the correct person record is displayed in the Person block
• Select the Web Resource Grants button to display the Person Web Resource Grant block
• Select the web resource for which access is to be deleted
• Delete record
• Save
• Select the Back button

To copy menu, form and Job Grants from one Security Role to another, using the Maintain Security Role Function Grants form:

• Ensure the recipient Security Role record is displayed in the Security Role block.
• Select the Copy From button to display the Copy From block.
• Execute a query in the Security Role field to locate the Security Role whose grants are to be copied.
• Select the Copy button. The menu, form and Job Grants of the Security Role queried in step 3 will be copied to the recipient Security Role and be automatically saved.
• Select the Reconcile Objects button or run SECJ0070.

Rules/Notes:

On executing the Copy function, the records copied to the recipient are automatically saved.

To display the copied Menu Grants it is necessary to re-query the Security Role Menu Grant block. Navigating to the Security Role Form or Job Grant blocks will automatically re-query these blocks.

1762 - CAPS -User Interface

1747 - 11g Product Structuree