User Security / Tracing

Yahoo Archive
1
Not sure that is possible from any method I can think of.

However, what you need to do is get the person who has the broader
permissions to change their password and make sure they don't let anyone
else know what it is.

This is clearly multi-stage problem, both a personnel problem, along with a
security problem.

Personnel because it sounds like people don't treat passwords the way they
are supposed to, passwords shouldn't be known by anyone other than the user.
No one should be giving anyone their password to use for any reason, if they
don't have access then they don't have it for a reason, and if they need
access and are supposed to have it then they need to go through the proper
channels.

If a person wouldn't be making changes to quotes, then they shouldn't have
access to quotes that allows them to change it. That's a security setup
problem, if someone needs to see information, then give them trackers, not
entry screens.

-----Original Message-----
From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf Of
Virginia
Sent: Friday, September 17, 2010 10:20 AM
To: vantage@yahoogroups.com
Subject: [Vantage] User Security / Tracing

Hello: vantage 8.03.408 - We believe that we may have a security problem
were a user (with limited access) has logged into Vantage using another
person's User ID (who has much broader access rights).

In opportunity/quote tracker, the QuoteQty.Changedby field shows a userid
that should never apper in the changedby field because this person would not
be making changes to quotes (even though they have security rights to be
able to do so if they wanted to). The data dictionary confirms that this
field is the Userid of user who made the last change to this record. I do
not see how this field could have possibly been manually changed.

What I would like to do is to be able to record which PC's on our network
have been used in conjuntion with which usernames to access Vantage.

Is it possible to use Tracing to accomplish this? My concern is that turning
on tracing for all usernames accessing Vantage would be too much activity
and have a negative impact on Vantage's performance.


Any suggestions would be greatly appreciated.

Thanks,
Virginia Joseph






------------------------------------

Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have
already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder and
Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/linksYahoo! Groups Links
2
Hello: vantage 8.03.408 - We believe that we may have a security problem were a user (with limited access) has logged into Vantage using another person's User ID (who has much broader access rights).

In opportunity/quote tracker, the QuoteQty.Changedby field shows a userid that should never apper in the changedby field because this person would not be making changes to quotes (even though they have security rights to be able to do so if they wanted to). The data dictionary confirms that this field is the Userid of user who made the last change to this record. I do not see how this field could have possibly been manually changed.

What I would like to do is to be able to record which PC's on our network have been used in conjuntion with which usernames to access Vantage.

Is it possible to use Tracing to accomplish this? My concern is that turning on tracing for all usernames accessing Vantage would be too much activity and have a negative impact on Vantage's performance.


Any suggestions would be greatly appreciated.

Thanks,
Virginia Joseph
3
We've found the dcuser id in that field when the quote expires.

--- In vantage@yahoogroups.com, "Virginia" <vjoseph@...> wrote:
>
> Hello: vantage 8.03.408 - We believe that we may have a security problem were a user (with limited access) has logged into Vantage using another person's User ID (who has much broader access rights).
>
> In opportunity/quote tracker, the QuoteQty.Changedby field shows a userid that should never apper in the changedby field because this person would not be making changes to quotes (even though they have security rights to be able to do so if they wanted to). The data dictionary confirms that this field is the Userid of user who made the last change to this record. I do not see how this field could have possibly been manually changed.
>
> What I would like to do is to be able to record which PC's on our network have been used in conjuntion with which usernames to access Vantage.
>
> Is it possible to use Tracing to accomplish this? My concern is that turning on tracing for all usernames accessing Vantage would be too much activity and have a negative impact on Vantage's performance.
>
>
> Any suggestions would be greatly appreciated.
>
> Thanks,
> Virginia Joseph
>