Purpose

To control the access of user security roles to enrolment step functionality

Subsystem

Enrolments

Structure

Two Blocks

System Security Role

System Enrolment Step Type Access

Function Button invokes:

Default Steps process

Image

System Security Role

Explanation

A student's enrolment details are recorded and maintained primarily using the Record Enrolments form (ENRF3000). That form consists of three main screens, navigation buttons and T-list (2) items. Selection of a T-list item displays a set of data related to a particular function. All staff with access to these functions can view the data contained in T-list items.

The data entry process is defined in the System by a number of procedure steps, each corresponding to the use of a screen, navigation button or T-list item. These are recorded and maintained using the Maintain Enrolment Category Procedure Detail form (ENRF0192).

This form is used to control the ability of staff, via their security roles, to add, modify or delete data contained in T-list items. This block is used to query and display the security roles recorded in the System. The block below is used to grant the ability to update T-list data to the security role displayed in this block.

Example

The security role ADMIN is granted to staff entering enrolment data. They require update access on all T-list items in order to perform their duties. The security role FACULTY is granted to faculty administrators. Their duties require them to be able to see the T-list data for 'their' students but not change it in any way. By displaying security roles ADMIN or FACULTY in this block, the ability to update each T-list item for each of these roles can be specified in the block below.

To inquire on a system security role, using the Maintain System Enrolment Step Access form:

1. Navigate to the System Security Role block.
2. Enter Query mode.
3. Enter query details in the appropriate field (optional).
4. Execute the query.
5. Scroll through the records returned until the required security role is located.

System Enrolment Step Type Access

Explanation

This block is used to specify the T-list enrolment steps which can be performed by users granted the security role displayed in the block above.

There are two ways of creating an initial set of steps for a security role. Which way to choose will depend on the number of steps involved:

• Where all, or the majority, of steps are to be permitted to the role, it is easiest to select the Default button. This causes the entire set of steps for all groups to be listed, with permission to perform all steps granted. The records can then be amended to deny permission for particular steps.
• Where only a few steps are to be permitted to the role, these steps can be selected record by record for each group in turn. Permission is automatically denied for any step not selected using this method.

Instructions on using these two methods are given below.

Example

The security role ADMIN is assigned to staff who require the ability to update all T-list item data. This is achieved by defaulting all T-list steps to the role and leaving their Perform Enrolment Step indicators set.

If the security role FACULTY was used instead for staff who required limited update access, for instance the ability to change a student's expected course completion period and self help group election, this is achievable in two ways:

• default all T-list steps to the role and deselect all of their Perform Enrolment Step indicators except those for steps SELFHELP and COMPLETION, or the easier option
• create two records, selecting SELFHELP and COMPLETION from the list of values containing all T-list enrolment steps.

To initially create a set of permitted enrolment steps for a security role, using the Maintain System Enrolment Step Access form:

1. Ensure that the required security role is displayed in the System Security Role block.
2. Navigate to the System Enrolment Step Type Access block.
3. Enter Insert mode.
4. Enter the required steps. Either follow the instructions under Method 1 or those under Method 2 :

• The set of available steps is system defined.
• Steps may not necessarily be defined for all three groups.
• A checkmark in the Perform Enrolment Step checkbox indicates that permission is granted to perform the corresponding step. To deny permission, remove the checkmark.
• When using Method 1, selecting the Default button automatically performs a save at that point.
• When using Method 2, permission is automatically denied to all steps not selected.

To add enrolment steps for a security role, using the Maintain System Enrolment Step Access form:

1. Ensure that the required security role is displayed in the System Security Role block.
2. Navigate to the System Enrolment Step Type Access block.
3. Select a step group from the list of values.
4. Enter Insert mode.
5. Select a step from the list of values (or key a valid value) in the Enrolment Step Type field of a blank record.
6. Continue selecting required steps as in 5.
7. For other step groups, repeat from 3.
8. Save.

• This facility is most likely to be used when a small set of steps for a security role was created initially, and it is now required to extend the set.
• When a step is added, permission to perform this step is granted by default (the Perform Enrolment Step indicator is set).

To modify an enrolment step using the Maintain System Enrolment Step Access form:

1. Find the record to be modified.
2. Modify the record as required.
3. Save.

• The only possible modification is to change the value of the Perform Enrolment Step checkbox.
• The effect of removing the checkmark from the Perform Enrolment Step checkbox is the same as deleting the record. In both cases, the ability to perform the step is blocked.

To delete an enrolment step using the Maintain System Enrolment Step Access form:

1. Find the record to be deleted.
2. Locate the cursor in the record to be deleted.
3. Delete record.
4. Save.

Changes within this form will have the following notable effects:

A user cannot process data in T-list steps of the Record Enrolments form ENRF3000 unless:

• the required steps have been assigned to their security role using this form, and
• those steps have the Perform Enrolment Step indicator set.