Do you know if there is a certain directory that all users have to have
access to in order to get to the forms that they should in workflow?  We
are going to try and use  SiteMinder to deny unauthorized direct access
to Remedy Mid-tier URLs.  Will they need anything other than
arsys/shared/*, /arsys/resources/* and the urls to the 2 forms we want
them to access directly?

Thanks,


Janet Mahan
Network Systems Administrator II
EMBARQ
 
Voice: 941-766-6199  |  Wireless: 321-356-0128  |  Fax: 941-766-6199
Email: [EMAIL PROTECTED]
  
Voice | Data | Internet | Wireless | Entertainment
 
This e-mail is the property of EMBARQ and may contain confidential and
privileged material for the sole use of the intended recipient(s). Any
review, use, distribution or disclosure by others is strictly
prohibited. If you are not the intended recipient (or authorized to
receive for the recipient), please contact the sender and delete all
copies of the message.


-----Original Message-----
From: Action Request System discussion list(ARSList)
[mailto:[EMAIL PROTECTED] On Behalf Of Carey Matthew Black
Sent: Wednesday, November 28, 2007 6:04 PM
To: [email protected]
Subject: Re: mid tier lock down URL

Janet,

I would not solve this at the Web server layer. Fix it at the ARS level.
:)

A) Build a way of knowing who should have access to the form. ( Like a
form with a data record per form per group that has visible access to
the form.)
 A1) The form should use row level access so that only members of the
listed group will have access to that row.
B) Add a field and two active links to all your forms that fire on
Window Open.
 B1) Active link 1 does a set field action to get a record form the form
in part A.
 B2) if the field does not have a value then it closes the current form,
or does stuff to log it.. etc...

It "hard part" is adding the field to all the forms. Adding the workflow
to all the forms is easy.

--
Carey Matthew Black
Remedy Skilled Professional (RSP)
ARS = Action Request System(Remedy)

Love, then teach
Solution = People + Process + Tools
Fast, Accurate, Cheap.... Pick two.


On Nov 28, 2007 4:59 PM, Mahan, Janet L [EQ] <[EMAIL PROTECTED]>
wrote:
> **
>
>
> Is there a simple way for someone that doesn't know a lot about 
> creating/modifying web pages to keep users from changing the URL in 
> the mid-tier and going directly to a form that they have hidden access
to??????
>
> Janet Mahan
> Network Systems Administrator II
> EMBARQ
>
> Voice: 941-766-6199  |  Wireless: 321-356-0128  |  Fax: 941-766-6199
> Email: [EMAIL PROTECTED]
>
> Voice | Data | Internet | Wireless | Entertainment
>
> This e-mail is the property of EMBARQ and may contain confidential and

> privileged material for the sole use of the intended recipient(s). Any

> review, use, distribution or disclosure by others is strictly 
> prohibited. If you are not the intended recipient (or authorized to 
> receive for the recipient), please contact the sender and delete all
copies of the message.
>  __20060125_______________________This posting was submitted with HTML

> in it___

________________________________________________________________________
_______
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org Platinum
Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are"

_______________________________________________________________________________
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
Platinum Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are"

Reply via email to