Company: Link Technologies
Case No: L10534. Project: 12.10: LinkSOFT version 12.1
Logged By: Rashna (Edge Business Solutions) on 02 Aug 2019 12:30PM
Priority: High
Product: Point of Sale
Group: Enhancement
Time Taken: 37.50 (Weight: 37.50)
Version: 12.10.1020
Assigned To: Rashna (Edge Business Solutions)
Circulation: Alvis, Development, Rashna, Sanjay
Resolve By: Friday, 09 August 2019 12:00 AM [1938 days since logged date]
Status: Closed
Subject: Review the access for "519-1-Product Cost"
Summary:    

Steps to Replicate

  1. Enter the last cost for product 01068 a s$5.00
  2. Go to "Role Menu Access".
  3. Select a user.
  4. Disable the access "Active", "Read", "Write" and "Delete" access for "519-1-Product Cost".
  5. Go to menu 519. The cost field is disabled. This is correct.
  6. Generate the "Inventory Master Detail Listing" report with the user account. Cost is printed in the report.

We need to enable this security on the menus and reports.

Audit Notes:Edited by alvis on 10/02/21 16:56. Edited by alvis on 08/05/20 15:42. Edited by alvis on 08/05/20 15:42. Edited by alvis on 04/05/20 10:59. Edited by sanjay on 13/08/19 10:33. Edited by sanjay on 05/08/19 16:26. 
02 Aug 201912:30PM Comment 1 by Rashna (Edge Business Solutions) Case 10534 added to project 11.0
05 Aug 201904:26PM Comment 2 by Sanjay (Link Technologies) Assigned To: Rashna (Edge Business Solutions) Followup Date: 05-08-2019 04:26 PM

Hi Rashna,

The purpose of the security was to prevent data entry operators from seeing the cost of In Stock amounts. This is done at the SCREEN levels.

For Reports, the "use case" is usually for management where the user is given specific access to inventory in order to analyze the actual levels and costs. Using the security in the report would not be viable as some reports have computations that will shoe the levels by simple reverse calculations.

I would ask the users to REMOVE ACCESS from reports that are sensitive instead of masking the entries.


05 Aug 201904:26PM Comment 3 by Sanjay (Link Technologies) Case 10534 removed from project 11.0
13 Aug 201909:04AM Comment 4 by Rashna (Edge Business Solutions) Assigned To: Sanjay (Link Technologies) Followup Date: 23-08-2019 12:00 AM Time Taken: 0.50

Hi Sanjay, 

There is an inconsistency with the control "519-1-Show Product Cost".

  1. Disable the access for user "Admin".
  1. Generate the "Inventory Listing" report with show cost as "Y".  The cost is not printed. The cost column shows ****.
  2. Generate the "Inventory Master Listing Report". This prints the cost. 
  3. The above shows the access is not consistent.
With respect to comment 2, removing access is not a suitable workaround. In most cases users should be able to generate the report for analysis. For example,in the case of "Inventory Master Listing Report" if users want to know all products sold at "Allow Negative", they would need to generate the report. 
Please review and advise.

Thanks
Rashna



20 Aug 201910:30PM Comment 5 by Sanjay (Link Technologies) Assigned To: Development Followup Date: 20-08-2019 10:30 PM
Hi Rashna, I will move this case to development ~> Design and review this in the next week.

04 May 202010:59AM Comment 6 by Alvis (Link Technologies) Case L10534 added to project 11.6
08 May 202003:42PM Comment 7 by Alvis (Link Technologies) Case L10534 added to project 11.5
08 May 202003:44PM Comment 8 by Sanjay (Link Technologies) Assigned To: Rashna (Edge Business Solutions) Followup Date: 08-05-2020 07:42 PM Time Taken: 32.00

Development work for this case has been completed.

The change will be available in version:11.5.0508

1. The following changes were made(Include Database object names, Program classes and any other relevant information):

  1. Implemented security access "Stock Level View" and "Show Product Cost" to all web forms and reports

2. Affected Areas:

  1. Inventory Web forms and reports

3. The issue was caused by:

  1. Improvement

4. Notes: 
5. Next Step: UAT


15 May 202001:48PM Comment 9 by Rashna (Edge Business Solutions) Assigned To: Alvis (Link Technologies) Followup Date: 15-05-2020 05:12 PM Time Taken: 1.00
QA Results
Tests carried out according to requirements specified on the case header

Test Results Summary

Table 1 - Summarised list of issues
NoTest DescriptionPass/Fail
1

Disable Access for "Stock Level View" and "Show Product Cost".

Validate that the stock and cost of the inventory is hidden on below menus

  1. Product Master
  2. Stock Adjustment
  3. Stock Take
  4. Stock Transfer
  5. Stock Replenishment
  6. Purchase Request
  7. Purchase Order
  8. Valuation

Enable the access the stock and cost of the inventory should be seen. 
Pass
2

Disable Access for "Stock Level View" and "Show Product Cost".

Validate that the stock and cost of the inventory is hidden on below reports

  1. Inventory Adjustment Report
  2. Inventory Cost Listing
  3. Inventory Dead Stock Report
  4. Inventory Listing
  5. Inventory Master Detail Listing
  6. Inventory Movement (Last 7 days)
  7. Inventory Movement Report
  8. Inventory Sell Price Listing
  9. Inventory Transfer Listing
  10. Inventory Transfer Delivery Listing
  11. Inventory Valuation Report
  12. Enable the access the stock and cost of the inventory should be seen. 

Fails.

  1. Set the access as "Active" for "Show Product Cost".
  2. The cost is sent in the web forms (Correct).
  3. Cost is hidden in the reports . This should show too.

Environment Details

  1. OS version: Windows Server 2012
  2. Application version: 11.5.0514
  3. Setup: Demo
  4. Server : 10.0.0.14
  5. Database: LINKSOFT-DEMO-11-RASHNA

Next Step: 

  1. Review

    18 May 202009:05AM Comment 10 by Sanjay (Link Technologies) Assigned To: Rashna (Edge Business Solutions) Followup Date: 18-05-2020 12:33 PM Time Taken: 2.00

    Development work for this case has been completed.

    The change will be available in version:11.5.0518

    1. The following changes were made(Include Database object names, Program classes and any other relevant information):

    1. The security check for these reports was checking for BackOffice menu which has been migrated to the web. Changed the security framework to look into web menus.

    2. Affected Areas:

    1. Reports listed above

    3. Notes: 
    4. Next Step    : UAT


    18 May 202002:42PM Comment 11 by Rashna (Edge Business Solutions) Assigned To: Rashna (Edge Business Solutions) Followup Date: 18-05-2020 06:37 PM Time Taken: 1.00
    QA Results
    Tests carried out according to requirements specified on the case header

    Test Results Summary

    Table 1 - Summarised list of issues
    NoTest DescriptionPass/Fail
    1

    Disable Access for "Stock Level View" and "Show Product Cost".

    Validate that the stock and cost of the inventory is hidden on below reports

    1. Inventory Adjustment Report
    2. Inventory Cost Listing
    3. Inventory Dead Stock Report
    4. Inventory Listing
    5. Inventory Master Detail Listing
    6. Inventory Movement (Last 7 days)
    7. Inventory Movement Report
    8. Inventory Sell Price Listing
    9. Inventory Transfer Listing
    10. Inventory Transfer Delivery Listing
    11. Inventory Valuation Report
    Enable the access the stock and cost of the inventory should be seen. 

    		Pass

    Environment Details

    1. OS version: Windows Server 2012
    2. Application version: 11.0.0506
    3. Setup: Demo
    4. Server : 10.0.0.14
    5. Database: LINKSOFT-DEMO-11-RASHNA

    Next Step: 

    1. Documentation
      1. Users need to select option to view cost or price for Reports that have show "Cost or Price" as Yes/No

      27 May 202002:25PM Comment 12 by Rashna (Edge Business Solutions) Assigned To: Rashna (Edge Business Solutions) Followup Date: 27-05-2020 06:08 PM Time Taken: 1.00

      Hi Sanjay, 

      Documentation has been updated at LinkSOFT\LinkWebApplicationsPortal\Global Administration\Security_Controls.htm

      Thanks
      Rashna


      If you have any queries regarding this support incident, please email admin@linktechnologies.com.au and include the Case No: L10534 in the subject line of all emails regarding this issue.

      Document size: 17.9 KB
      For call complaints, please contact the Managing Director of the company using this form.