Security - SUPER for only one company

John
John Member Posts: 43
edited 2008-02-13 in NAV/Navision Classic Client
Does anyone know how to give a user SUPER rights for only one COMPANY?
When I define the company name in the role for that user he still enters the default company with SUPER-rights. He also is allowed to change back his one rights to all companies in the security administration.

Comments

  • kine
    kine Member Posts: 12,562
    Native or SQL server?
    Kamil Sacek
    MVP - Dynamics NAV
    My BLOG
    NAVERTICA a.s.
  • viswanath
    viswanath Member Posts: 24
    if u have only one database user with having super permissions u can't ristrict him to access another companies, because atleast one user should have access on total database
    so u creat another user whom do u want to restrict from accessing another companies ,with super role and and give the company name what ever u want to give access .
    for example u want john doesnot have permission to access another company which is in ur database
    then u create ur self as one user with super role and john is another user with super roll.
    now atleast one of u should have the permmission to acess whole database
    so u keep ur self as total database administrator and restrict john for one comapny what ever u want by giving the company name in user -roles.
  • John
    John Member Posts: 43
    It concerns a native database.
    It is a central database with 5 companies (5 different countries).
    All these companies have several users and one manager.
    This manager needs the role SUPER but he should be restricted to his own company.
  • DenSter
    DenSter Member Posts: 8,307
    As long as there is at least one user that is SUPER for all companies, you should be able to restrict users to one company.

    Tools, Security, Database Logins (or Windows Logins). Click Roles, and there you should see a Company column. Select the appropriate company for the user. Voila.
    Daniel Rimmelzwaan
    RIS Plus, LLC
  • John
    John Member Posts: 43
    Take a Cronus database.
    Add a Company 'Cronus 2'
    Make 3 database logins:
    SuperAll with Role Super
    Super1 with Role Super for Cronus
    Super2 with Role Super for "Cronus 2"
    Select Company Cronus and finish Navision

    If start navision again and log in as Super2 you wil see that you enter Cronus with SUPER rights.
    Only after you changed Company you are restricted to "Cronus 2"
    So a dangerous part of the security depents on your zup-file.
    Hardly security!
  • Ian_Piddington10199
    Ian_Piddington10199 Member Posts: 167
    Which Version of NAV are you using?

    I have just tried your example on NAV5 Native and SQL

    I have 2 companies:
    CRONUS NZ
    CRONUS AU

    I have 3 users
    SUPERALL with the Role Super
    SUPER1 with the role SUPER for CRONUS AU
    SUPER2 with the role SUPER for CRONUS NZ

    I was in CRONUS NZ when i set these up. I closed the database When I went to reopen teh Company by selecting the Company form the recently accessed list I was prompted to log in.
    I logged in as SUPER1 and promptly got Permissions warnings, which I expected. When I went to Company Open I only had CRONUS AU in the list of companies as I don't have any permissions in CRONUS NZ.

    I then tried the same by exiting NAV altogether and when I reopend the client i had the same results.

    No need to do anythign with the zup file.

    Regards

    Ian
    Regards

    Ian
  • John
    John Member Posts: 43
    Yes, it works in NAV 5.00 (I was working in NAV 4.01)
    Lets find if this issue is important enough for an upgrade.
  • John
    John Member Posts: 43
    It's too bad but, once you’re in the only company you have access to you can change your own security to all companies
    That is not really secure!

Categories