Security Builder

Security Check Stages

atrieveERP Web Portal menu security is a dynamic model driven by the atrieveHR Assignment information. This ensures that proper security access is given to the employee as they change Positions or locations without any manual action being required. When an employee accesses the atrieveERP Web Portal, they go through three stages of security checks to determine their authenticity and security level.

Security Check 1: Username and Password

• The case- sensitive username and password entered by the employee is validated against a security server such as LDAP or an SQL database. If the information is found to be correct, Security Check 2 is applied.

Security Check 2: Assignment Detail (Position & Role)

• The employee must have an active assignment. If this security check fails, Security Check 3 is applied. The Position Code on the active employee's current assignment determines their Web Portal menu access. The Security Check looks for the Role Type entered for this Position in the Position Code Database in atrieveHR. If no Role Type has been entered in the database, Security Check 3 is applied.
• The Position Code also determines if the employee has access to authorize AMS Web entries. If yes, the Authorizer field of the Position Code Database will display the code word AUTHORIZE.
• The location(s) on the employee's atrieveHR assignment control what information will be displayed in AMS Web and in the SIW Manager Level Info windows. If the employee has multiple locations on their assignment, when accessing one of these modules they will always be prompted for which location they wish to access. These two modules will only display information on Teaching and Support Staff employees with active assignments at that location.

Security Check 2A: Security Override

• A further Security Check will be done against the Security Builder. This program is where override security information can be entered for employees. The file will contain the employee number and an override location and/or role code and/or authorizer code. If the Security Check finds an entry in this file for the employee, it will use this override security information instead of the security information collected during Security Check 2.

Security Check 3: Category Override (Category and Role)

• The employee must have a non- terminated status. The employee's category will now determine their Web Portal menu access based on the Role Type entered in the Employee Category database in atrieveHR. If no Role Type has been entered in the database, the security check fails, and the employee is denied access to the Web Portal. The message that appears is "Invalid Username and Password".