Ask the Experts - 93
Can u please explain me what is row level security and how is it implemented in peoplesoft with example how does Action modes useful,when a user is opening a component (i reffered peoplesoft help but i dint understand)
Thanks for posting your question!
Row Level Security:
RLS is a feature delivered with PS to restrict users access to data. Consider following examples:
- An employee in dept 101 which belongs to IT. You do not want this user to access data from dept 001 which belongs to Finance.
- A manager in SE region should only have access to data from his Business Unit and not have access to data from NE Business unit.
You can implement RLS to ensure that above mentioned restriction applies.
Refer to PERSONAL_DATA in your HR environment. Check its properties. It will have an associated Query Security Record. This record is basically a view which will be automatically joined when PERSONAL_DATA is used in a query. This will ensure that you can only view selective data.
Similarly there are RLS implementation methods for BU, Ledger, etc.
Refer to your current demo environment alongwith PeopleBooks for more examples.
The actions provide the ability to the user to perform specific transactions on the table/record associated with the component.
Add – If this is selected then this allows user to insert record in the table through component. If you have a component where you want to add an employee in the table. If you uncheck this then the user will not be able to add/insert new values in the table through the component.
Update/Display – Allows the user to update the existing records in the table through component.
Update/Display All – This should be used only if effective date is part of the main record used on the page. This allows the user to modify/update current and future records.
Correction – This is again related to effective date. If this is checked the user can modify history, current and future records
So the above action setting basically decide whether the user can add/insert and update in the table associated.