1. Session ID:4077 Presenter:Bruce Knox Institution:University of Arkansas Argos Reporting and Value Based Security

2. Session Rules of Etiquette −Please turn off your cell phone. −If you must leave the session early, please do so discreetly and quietly. −Please avoid side conversation during the session. Thank you for your cooperation!

3. Agenda −Banner Baseline Fund/Orgn Security Review, How it is setup – How it works −Verify that Fund/Orgn Security is Enabled −Verify a USER’s access −Quick Conversions to Fund/Orgn Security

4. Agenda −Banner Baseline Fund/Orgn Security Review, How it is setup – How it works

5. Agenda −Banner Baseline Fund/Orgn Security Review, How it is setup – How it works −Verify that Fund/Orgn Security is Enabled

6. Agenda −Banner Baseline Fund/Orgn Security Review, How it is setup – How it works −Verify that Fund/Orgn Security is Enabled −Verify a USER’s access

7. Agenda −Banner Baseline Fund/Orgn Security Review, How it is setup – How it works −Verify that Fund/Orgn Security is Enabled −Verify a USER’s access −Quick Conversions to Fund/Orgn Security

8. What is Banner Fund/Orgn Security? −Fund/Orgn Security is used in ePrint and many other reporting applications. −It is a part of Baseline Banner −Requires securing the Query code

9. What is Banner Fund/Orgn Security? −Fund/Orgn Security is used in ePrint and many other reporting applications.

10. What is Banner Fund/Orgn Security? −Fund/Orgn Security is used in ePrint and many other reporting applications. −It is a part of Baseline Banner

11. What is Banner Fund/Orgn Security? −Fund/Orgn Security is used in ePrint and many other reporting applications. −It is a part of Baseline Banner −Requires securing the Query code

12. Fund/Orgn Security Enabled? Fund/Orgn Security Indicator on Form FOASYSC Must be Checked ☑

13. Fund/Orgn Security Enabled? Fund/Orgn Security Indicator on Form FOASYSC Must be Checked ☑ This Form allows one to Enable Fund/Orgn Security for the Banner Database Instance.

14. Fund/Orgn Security Enabled?

16. Is Fund/Orgn Security Enabled?

19. Fund/Organization Security −The User Profile Maintenance Form (FOMPROF) −Allows Enabling Fund/Orgn Security for a USER

20. Fund/Organization Security Setup

21. Master Fund and Master Organization One can establish the USER as having: −No Authority −Query Only Authority −Posting Authority or −Both Posting and Query

22. Beware of the Master Access Bypass Warning: Master Fund and Master Orgn access returns every Fund and Organization Instead: Use the Funds and Organizations on the sub-Forms: Fund Security Maintenance Form(FOMUSFN) Organization Security Maintenance Form(FOMUSOR).

23. Form FOMUSFN Fund Security

25. Form FOMUSOR Orgn Security

26. Banner Security: Fund/Orgn Security -- Banner Security: Fund/Orgn Security via the Banner Tables and Forms: -- FOBSYSC is the Table that Enables Fund/Orgn Security using Form FOASYSC. -- Y for Enabled (i.e., Check Marked) -- N for Disabled -- FOBPROF is the Table that allows Master Fund and Orgn to be given using Form FOMPROF. -- FORUSFN and FORUSOR are the tables for the forms used to update Fund/Orgn Security for a USER. -- Form names are FOMUSFN and FOMUSOR, respectively. -- B means the user has both Query and Posting access. -- Q means the user only has Query access. They can see the reports but couldn't post a transaction. -- P means the user only has the ability to Post transactions and not view reports or query information. -- FOBSYSC_FUND_ORG_SECURITY_IND NOT NULL VARCHAR2(1 CHAR) -- FORUSOR_ACCESS_IND NOT NULL VARCHAR2(1 CHAR) -- FORUSFN_ACCESS_IND NOT NULL VARCHAR2(1 CHAR) -- FOBPROF_MASTER_FUND_IND VARCHAR2(1 CHAR) -- FOBPROF_MASTER_ORGN_IND VARCHAR2(1 CHAR) So, there are four Tables being checked for your Fund/Orgn Security access.

27. Banner Security: Fund/Orgn Security >SELECT DISTINCT FOBSYSC_FUND_ORG_SECURITY_IND FROM FOBSYSC; Y N >SELECT DISTINCT FOBPROF_MASTER_FUND_IND FROM FOBPROF; P QB > SELECT DISTINCT FOBPROF_MASTER_ORGN_IND FROM FOBPROF; P Q B > SELECT DISTINCT FORUSFN_ACCESS_IND FROM FORUSFN; P Q B > SELECT DISTINCT FORUSOR_ACCESS_IND FROM FORUSOR; P Q B

28. Why you don’t want to just use the Tables Directly

30. In Argos

31. Why you don’t want to just use the Tables Directly

32. This Banner Function makes it work F_FUND_ORG_SECURITY_FNC (Chart_of_Accounts, FUND, ORGN, As_of_Date, -- default sysdate Query_or_Post, -- default 'Q', Which_User_ID) -- default USER Returns: Y for Yes N for No

33. An Example f_fund_org_security_fnc('Z','14001','3601','','Q','SJAMES')

34. Just a test in SQL*Plus BKNOX: ACES> select f_fund_org_security_fnc('Z','14001','3601','','Q','SJAMES') from dual; F_FUND_ORG_SECURITY_FNC('Z','14001','3601','','Q','SJAMES') ----------------------------------------------------------------------------------- Y

35. OK, it takes a little more code to do it well For Fund/Orgn Security to be in use, the Fund/Orgn Security Indicator on FOASYSC must be Y. from..., FOBSYSC where decode(fobsysc_fund_org_security_ind,'Y', f_fund_org_security_fnc('Z',ftvfund_fund_code, ftvorgn_orgn_code,'','',''),'Y')='Y' and FOBSYSC_EFF_DATE <= SYSDATE and (FOBSYSC_NCHG_DATE IS NULL OR FOBSYSC_NCHG_DATE > SYSDATE) and FOBSYSC_STATUS_IND = 'A'

36. Be sure you are still using Fund/Orgn Security The final ‘Y’ in the DECODE is the Default value. from..., FOBSYSC where decode(fobsysc_fund_org_security_ind,'Y', f_fund_org_security_fnc('Z',ftvfund_fund_code, '','','',''),'Y')='Y' and FOBSYSC_EFF_DATE <= SYSDATE and (FOBSYSC_NCHG_DATE IS NULL OR FOBSYSC_NCHG_DATE > SYSDATE) and FOBSYSC_STATUS_IND = 'A‘

37. Banner Fund/Orgn Security

38. Which Funds and Orgns Can I See?

40. In Argos

46. Which Funds and Orgns Can a User View

52. A Real Fund/Orgn Query use ), FOBSYSC where decode(fobsysc_fund_org_security_ind,'Y', f_fund_org_security_fnc('Z',OPAL_FUND,OPAL_ORGN, '','',''),'Y')='Y' and FOBSYSC_EFF_DATE <= SYSDATE and (FOBSYSC_NCHG_DATE IS NULL OR FOBSYSC_NCHG_DATE > SYSDATE) and FOBSYSC_STATUS_IND = 'A'

53. A Real Fund/Orgn Query

54. Summary − Verify that your site has Fund/Orgn Security Active − Use “Which Funds and Orgns Can a User View” QV − Determine and Verify a restricted access USER − First, Build your Query without Fund/Orgn Security − Add the code containing the F_FUND_ORG_SECURITY_FNC Function

55. Summary − Verify that your site has Fund/Orgn Security Active

56. Summary − Verify that your site has Fund/Orgn Security Active − Use “Which Funds and Orgns Can a User View” QV

57. Summary − Verify that your site has Fund/Orgn Security Active − Use “Which Funds and Orgns Can a User View” QV − Determine and Verify a restricted access USER

58. Summary − Verify that your site has Fund/Orgn Security Active − Use “Which Funds and Orgns Can a User View” QV − Determine and Verify a restricted access USER − First, Build your Query without Fund/Orgn Security

59. Summary − Verify that your site has Fund/Orgn Security Active − Use “Which Funds and Orgns Can a User View” QV − Determine and Verify a restricted access USER − First, Build your Query without Fund/Orgn Security − Add the code containing the F_FUND_ORG_SECURITY_FNC Function

60. Referenced I first heard of Banner Fund/Orgn Security from Bill Pearce Principal Consultant, Strata Information Group Google for BannerFinanceUserGuide7.pdf which has a section on Fund/Orgn Security setup

61. DataBlock Samples Is Fund/Orgn Security Enabled? Which Funds and Orgns Can a USER View? Which Funds and Orgns Can I See? Which Funds and Orgns Can I See? plus USER display http://betwinx.com/BannerScripts.htm The password is: scripts Or, the Evisions COOP

62. Thank you! Bruce Knox at bknox @uaex.edu www.uaex.edu/bknox/ www.uaex.edu/bknox/ http://betwinx.com/ Argos objects: http://betwinx.com/BannerScripts.htm The password is: scripts This presentation ppt: http://betwinx.com/Argos2012bknox.pptx

63. Questions?

64. Thank you for your attention! Argos Reporting and Value Based Security 4077