I HAVE INCLUDED A PREVIOUS DISCUSSION WITH QUANTRAC TECHNICAL SUPPORT TO POST MY DISCOVERY AND REQUEST.
-----Original Message-----
From: Quantrac Tech Support [
support@quantrac.com]
Sent: Tuesday, June 29, 2004 8:51 AMTo: Gerri
Subject: Re: USER SECURITY
Geri,
That report has been skipped. I turned it in as fix for our next release Ver. 9.0. In the meantime I would suggest removing the option "Toolbar-Reports Button" this will not allow users to access the reports at all. As of now this is the only way around this issue.
Thank you,
Quantrac Tech Support
At 03:30 PM 06/28/04, you wrote:
While setting up a new user's security rights, I made a startling discovery. I am wondering if I am just missing something here, but don't think that I am.....
When setting up the Group Rights, the option is given to remove the rights pertaining to "employee form" - which is great because we don't want anyone to be able to view compensation, etc. - However, in the section of "reports" under the group rights, it jumps from *directory reports to equipment reports.* It skips over the "employee reports" which is shown in the list of options when cliking on the reports button on the toolbar.
I tested this out by logging in as another user who does not have access to employee records, and guess what.....everyone who uses this system can access "employee record " through the reports button on the toolbar. Now granted they can not see compensation, but they are able to view and read and even print documented warnings, dates of pay adjustments, etc. Therefore, they are technically seeing confidential information.
Am I missing something, or is there a way around this? I just don't see where the group rights allows me to remove the right of viewing employee reports when access from the reports button on the toolbar.
HELP.
Thanks,
Gerri Ford
