Restricting Access to a Menu Item

Starting from PPM version 9.10, you can restrict access to a menu item by combining any of the following four ways:

• Access grant

• License

• Security group

• Server parameter

Restricting Access to a Menu Item by Configuring Access Grants and Licenses

You may control the security level of the menu item by combining PPM product licenses and access grants.

The code line for a product license looks like:

<license reference-code="<PRODUCT_KEY>" />

where the value for license reference-code represents a product key.

The code line for an access grant looks like:

<access-grant reference-code="<ACCESS_GRANT_KEY>" />

where the value for access-grant reference-code represents an access grant.

Edit the following code by adding or removing necessary lines to apply desired security level to your new menu item:

<security> 
   <and>
      <or>
         <license reference-code="6" />
         <license reference-code="8" />
         <license reference-code="3" />
         <license reference-code="2" />
      </or>
      <access-grant reference-code="1316" />
      <or>
         <access-grant reference-code="1095" />
         <access-grant reference-code="1091" />
      </or>
   </and>
</security>

For product names and their corresponding product keys, check the KNTA_PRODUCTS view for PRODUCT_NAME column and PRODUCT_KEY column in your Oracle database for PPM.

For access grant names and their corresponding access grant keys, check the KNTA_ACCESS_GRANTS view for ACCESS_GRANT_NAME column and ACCESS_GRANT_KEY column in your Oracle database for PPM.

Restricting Access to a Menu Item by Configuring Security Group Reference Code

To restrict access to a menu item by security group, you need to configure security group reference code in the menu.xml file.

For example, if you want to restrict the access to PPM Billing Manager that has Demand Management license,

The menu.xml file configuration would looks like the follows:

<security>
   <and>
      <security-group reference-code="_PPM_BILLING_MANAGER" />
      <license reference-code="2" />
   </and>
</security>

Note that the value of Reference Code field from the Security Group: PPM Billing Manager window in the Security Group Workbench is used to refer to access key for restricting access by security group.

Restricting Access to a Menu Item by Configuring server.conf Parameter Value

You can also use server parameters to restrict access to a menu item. This applies to server.conf parameters with a true/false value only.

Example:

<security>
   <and>
      <license reference-code="2" />
      <server-parameter name="COST_CAPITALIZATION_ENABLED" />
   </and>
</security>

This means that the menu item affected will be accessible when both of the following conditions are satisfied:

• The user has Demand Management license

• server.conf has a setting of COST_CAPITALIZATION_ENABLED=true