Attachment Security

Use the Attachment Security page to define user security for attachments in the application.

Menu Path

From the System Administration menu, select Administration. From the Security menu, select Attachment Security.

Implement Attachment Security

When the software is initially installed, all users can access all attachments in the applications for which they have security resources. Select Use Attachment Security in the Security Profile to prevent users from accessing attachments until specific security can be defined.

After you select Use Attachment Security on the Security Profile page, it uses the Attachment Security Resources Link page to determine permissions. If you have not set up attachment security records on this page, no users will be able to access attachments.

Plan attachment security carefully, using a spreadsheet or other means, to determine the access level you want to provide users for each of their job functions. Run the Security User Access List report to generate a complete list of all users and their existing security resources. Review the report to determine if employees have existing security resources that align with the pages where you want them to access attachments. Finally, set up the Attachment Security Resources Link page with all the records before selecting Use Attachment Security in the Security Profile.

For example, if certain employees process employee contracts, you may want them to have full access to related documents. In this case, you can set up an Attachment Group that includes the supervisor resource for employee contracts and assign Full Control to this group. Similarly, limit attachment access for employees who only have the resource to query contract details. For these employees, you can set up an Attachment Group for the resource to query employee contract details and assign the View Only access level to the group.

An alternative to using existing security would be to set up new security resources specifically for attachments, assign these resources individually, and then create the relevant attachment security. Again, the choice depends on your security procedures and organizational needs.

Add an Attachment Security Link

1. From the System Administration menu, select Administration. From the Security menu, select Attachment Security.
2. Click Add new.
3. Select an Attachment Group.
4. Select an Access Level:
   • F - Full Control: Users in this group can add, delete, and display attachments.
   • V - View Only: Users in this group can only display attachments.
5. Select the Security Resource to use for the attachment group and access level. To access attachments, users must be granted this resource or have a resource with a higher-level privilege code than the one associated with the selected attachment group.
6. Click OK or Accept to save the record.

Since each record is defined by the combination of attachment group, access level, and security resource, it cannot be changed once a record is added. To replace a record, delete it and add a new one that includes the appropriate group, level, and resource.

Delete an Attachment Security Link

1. From the System Administration menu, select Administration. From the Security menu, select Attachment Security.
2. Enter Search Criteria identifying records to list and then click Find.
3. Select the record to delete and then click Delete.
4. Click Yes to confirm.

Attachment Security Details

The following fields are used to create the security link between the Attachment Group, Access Level, and Security Resource. These fields are read-only for existing records because they cannot be edited.

Security Resource Information

The Security Resource Information section populates with read-only information based on the selected Security Resource in the Attachment Security Details section.

• Package
• Subpackage
• Function
• Privilege Code
• Description

Related Pages

Resources

Security Profile

User Access