Monday, January 11, 2016

PeopleSoft Security Basics


Why PeopleSoft Security?


Peoplesoft is a client server application suite based on client server architecture. It is similar to other ERP systems, which connects to RDBMS as backend, and that can be Oracle , IBM DB2, Informix, Sybase, SQL Server etc, based on client environment. 

Since Peoplesoft HRMS is a productive product suite, Security is mandatory , as the data mainly deals with personal information such as SSN, credit card etc, So there should be sufficient provision of security towards the data accesses.

All users are not exposed and given the same access towards the application and only authorized user have the access to application servers. All this things are handled by security principles defined with the help of peoplesoft security.

The PeopleSoft Internet Architecture falls into the category of PeopleSoft online security, also known as runtime security, which means that only authorized users can connect to the web and application servers, and only authorized application servers can connect to a backend database.

PeopleSoft Security           
T   
     PeopleSoft security approach is tailored specially for the internet. PeopleTool Security enables provision of security to all of the users of PeopleSoft system.
     Using the Definition Security People Tool we can restrict access to the objects developers created in PeopleSoft Application Designer.
 
Below are some terms Used while implementing Peoplesoft Security

USER ID          - Enables access to system.
                     -  Authenticates, Authorizes. 
ROLE              -   A named set of work that a user can do.
                     -   Works in conjunction with Workflow.
                     -   Comprised of “1 or more” Permission Lists.
PERMISSION
LIST               - Defines the pages to which the employee is                                                                  authorized to gain access.

Different types of Security
Sign on and Time-out Security:-

User is asked to enter User ID and a password on the PeopleSoft Sign on page also called as PIA page, when signing into PeopleSoft. For a valid userid ID and password, PeopleSoft connects the user to the application and the system retrieves the appropriate user profile. When a user signs on, they are connected as long as their sign on time allows and as long as their browser doesn’t sit idle for longer than their time-out interval is met.

Page and Dialog Security:-
            
Page and Dialog Security is used for granting access to PeopleSoft menus, Users can be controlled from accessing the data with the help of Peopletool Security.    

Batch Environment Security:-

For running a batch Processes from PeopleSoft Process Scheduler, appropriate Process Profile to the User Profile should be assigned along with proper process groups.
Each batch program has a run control that we define before we can run the batch program.

Definition Security:-

For restricting the access of application developers, a separate People tool called ‘Definition Security’ is used , which can be used to govern access to the Record definitions, Field definitions, but Page definitions as well.

Application Data Security:-

Definition Security is a type of data security- which is used to control access to object definitions in the People tool tables. We can set data permissions at the following levels:

Ø  Query/Table-Level Security:-  Query/Table Level Security helps us to build SQL queries to 
retrieve information from application tables.
Ø  Row-Level Security:-  Row Security Permission list is used to define data security to users.
Ø  Field Security:-  We can restrict the access to particular fields or columns within our 
application tables by using People code.

************************************Thanks for reading *************************

     Freshers / Students:-

     For making career in PeopleSoft and learn PeopleSoft Technical / DBA / Functional Please visit www.orainstall.com

No comments:

Post a Comment