Greentree Security Features
Greentree Desktop's data security model protects the confidentiality of your sensitive data.
User Level
User Level Security is set-up as part of user Maintenance. The HR security settings are accessed through the HR button on the User Preferences form. HR uses the All/Team/Mine concept to control access to records. User level security is defined at the All and Team level, with the Mine view available times. User Preferences allow for:
- Allow Security Changes - Determines if the user is authorised to maintain Assign To detail on the Security tab of the Maintenance forms.
- Read/Change/ Delete All Records - Determines if the user is authorised to Read /Change/Delete Records, regardless of the user and Team that they are Assigned to. If the User is not authorised to use All records, then the All View will not be available on the Maintenance forms.
- Read/Change/ Delete Team Records - Determines if the user is authorised to Read /Change/Delete records assigned to the User's Team(s). If the user is not authorised to use All or Team records, then only the 'Mine' View will not be available on the Maintenance forms.
- Can Verify Information - Determines if the user is authorised to Verify information using the Verified tick on the Maintenance forms.
- Add My Own Records - Determines if the user is authorised to Add records.
- Delete My Own Records - Determines if the user is authorised to Delete records that he is assigned to.
- User Scripts - Determines if the user is authorised to use User Scripts.
- System Scripts - Determines if the user is authorised to use System Scripts.
- The Security hierarchy expands to HR item level, which allows for authorization per individual HR item, such as People, Committees and Functions.
- A HR User must have Read access for a Person to view Pay information.
Form Level
All the major forms in HR contain a Security tab and a View field. The Security tab captures and displays the Assigned User and Team.
- Assigned User displays the user that the record is Assigned To.
- Assigned Team displays the Teams that the record is Assigned To.
Records are created with the Assigned User/Team defaulting based on:
- User Preferences
- Default Assigned User:
- Module Default - HR System settings is used.
- Mine - User defaults to the user who is currently logged in.
- Unassigned - No default user will be assigned when a new record is created.
- Default Assigned Team:
- Module Default - HR System settings is used.
- Default Team - The default Team for the user who is currently logged in will be used.
- Unassigned - No default Team will be assigned when a new record is created.
- HR System settings
- Default Assigned User:
- Mine - User defaults to the user who is currently logged in
- Unassigned - No default user will be assigned when a new record is created.
- Default Assigned Team:
- My Default Team - The default Team for the user who is currently logged in will be used.
- Unassigned - No default Team will be assigned when a new record is created.
The View field contains the All/Team/Mine views that the user is authorised to use, based on User level Security settings. This field determines which records you have access to. These options are available, depending on your User Level Security settings:
- All - All database records will be available, no limitation using the Assigned User /Team
- Mine - Only the records that you are Assigned To will be available
- Team - Only the records that are Assigned To your Teams will be available
The User Login SUPER overrides the View setting, allowing access to all records.