Security will always be a balancing act. The opposite of security is convenience, foolproof security is almost impossibly inconvenient, while simplifying it almost always leads to lower levels of security.
Three things must be done to implement security in your application.
|•||• First, set up your user groups. Take some time to organize groups of users by department or job function.|
|•||• Second, Add your users. Assign every user a login id and password.|
|•||• Third, define screen access levels.|
Setting Up User Groups
Log in as a supervisor and open the user list under File/Security/User List. At the bottom of this screen, press the button labeled User Group Details. You will see a list box, probably empty, so press the Insert button. You will see a form that asks for a User group name, and default access. Type in the name of the new user group and select "All Access" for the default access. Leave the Level set to Operator. The next User Group you enter will allow you to select a previously defined user group for a default access. User groups can inherit other user groups access privileges.
When a user logs in they can be classified into one of 3 possible Levels. the level with all the power is called a Supervisor. The Level with no power (in fact they will be denied access) is called No Access. In between, where a user has potentially limited power, they are allocated a Level called Operator. The difference between a Supervisor, and an Operator is obviously a significant one. Simply put, a Supervisor is allowed to change the security access rights of other Users. An Operator can not change either their own, or anyone else's, Access rights.
Now that your User groups are defined, return to the Browse Users list and press the insert key. You will see a form with First Name, Surname and Login fields. Enter your first user, using there first and last name, and give them a Login ID. The Login ID should be short and easy to type in. For access level, select Operator, unless you want this user to have Supervisor privileges too. Set the default access to "All Access". Users can also inherit other users access levels. Next, select the User Group for this user.
To add a new user select the [Insert] button.
A User's information is made up of a First Name, Last Name and Login code. After you have finished entering the first user, then you can use the Login code, and Password (which will be the same at this point) to log in.
Assigning Access Levels
By now you should have all of your user groups, and all of your users assigned to their groups. Now the fun begins. While logged in as supervisor, you must go into every screen and press CTRL-F8. This will bring up the Set User Access screen. You will see a list of your User Groups, and a list of protected controls that are initially all set to Yes for access. Double clicking on a Yes or No will cause it to toggle. For each user group, turn off the controls you do not want that user group to have access to in the current screen.