I am new to Jet and am struggling with a GP user issue and get conflicting advice from colleagues. The help and Jet user manual have not provided a solution.
I have a set of GP users, all with varying levels of access to GP companies and the GP modules within each company. I do not want the users to see details of remuneration or expense payments to our Directors. Within GP I have this organised, their security roles and access levels have been set so they cannot interrogate GP to get this information.
However in Jet they seem to be able to see everything. I have set the data sources to use their GP login but they still have access to everything.
I raised this specific isseu during a Jet webinar and was assured Jet would take heed of the GP security settings and limit access. I must be doing something wrong, any pointers to my error would be appreciated
mpd57
3 comments
-
Jet Reports Historic Posts Hi mpd57,
Jet Reports respects the security settings set up on the SQL Server that GP is using based on the SQL Server login you specify in the Jet data source settings. You can set up GP security in a number of different ways, but essentially you need to make sure your users have user accounts on the SQL server itself with the table and data privileges on those accounts limited in the ways you describe. Sometimes GP users will just setup their Jet users with the SA SQL server login and this is dangerous because the SA account has full access to everything in the database. It is much better to make limited user accounts on the SQL Server and use those logins for your Jet users. Does this help?
Regards,
Hughes -
Jet Reports Historic Posts Thank you for the reply.
It isn't what I am finding, whatever login I use to create a data source in Jet is giving me full access to everything in GP, even when I have taken all access to GP companies away.
But you have confimed I am looking at the right area, I will continue testing.
Thanks again, much appreciated
mpd57 -
Jet Reports Historic Posts I have never used Jet with GP, but I have used FRx and i can confirm that if you have setup "Account Level Security" that FRx will produce an error if a user tries running a report that includes a gl account that the user does not have access to in GP.