Maximo List Archive

This is an archive of the Maximo Yahoo Community. The content of this pages may be a sometimes obsolete so please check post dates.
Thanks to the community owner Christopher Wanko for providing the content.



FW: Antwort: Re: [MAXIMO List] Data Restriction Error

From: Shannon Rotz (2012-03-15 11:13)

Actually, it turns out that I already had it. This is a group restriction in Security Groups.

STATUS NOT IN ('DEFER','WAPPR') AND VENDOR = (SELECT VENDOR FROM PERSON, MAXUSER WHERE PERSON.PERSONID = MAXUSER.PERSONID AND USERID = :USER )

It worked for them in V6.2.4, and AFAIK, the vendors were doing status changes.

If that doesn’t work for you, I can check with them – they upgraded to V7 last year.



Shannon

From: Shannon Rotz [mailto:shannonrotz@yahoo.ca]
Sent: March-15-12 11:07 AM
To: 'MAXIMO@yahoogroups.com'
Subject: RE: Antwort: Re: [MAXIMO List] Data Restriction Error

Somebody I know did exactly the same thing, i.e. put on restrictions so vendors could log into the system and view only their work orders.

I’ll check it out with them and get back to you.



From: MAXIMO@yahoogroups.com [mailto:MAXIMO@yahoogroups.com] On Behalf Of Mary
Sent: March-15-12 8:22 AM
To: MAXIMO@yahoogroups.com
Subject: Antwort: Re: [MAXIMO List] Data Restriction Error


Also - we are tying user to vendor because the users are vendors who will be logging into Maximo and we need to relate the user record to the vendor record. We haven't quite decided how this is going to work so we are using userid = vendorid for now.
--- In MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> , "Mary" <mmangier@...> wrote:
>
> I have finally gotten back to testing this.
>
> I am using this restriction on a group that has access only to a quick reporting cloned app. If I use the :user variable I can save work logs and labor but I cannot save status changes or materials. When I hard code the userid instead of using the :user variable I can save any changes. It looks like it is having problems reevaluating :user during these operations.
>
> The expressions validate fine. I can use the vendor=:user expression in the app restriction and it also works fine - since it doesn't have to reevaluate.
>
> Any suggestions?
>
> Thank you, Mary
>
> --- In MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> , "Ben C" <ComptoBJ@> wrote:
> >
> > Okay lets go through this step by step... I was able to validate the expression works. Are you able to as well?
> >
> > Build the condition, expression type, Expression should be one of the following:
> > :vendor=:user - Test expression against the work order object...
> > :vendor=:&USERNAME& - Again test against Work Order object
> >
> > Does it comeback successful? If so then I would go so far as to say something else might be wrong?
> >
> > BTW Can you elaborate why users are tied to a Vendor/Company field? Just wondering is all... I would understand if you cannot explain why.
> >
> > Ben
> > NSTec LLC
> > Contractor to US Dept of Energy
> >
> > --- In MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> , "Mary" <mmangier@> wrote:
> > >
> > > I did try (most) every combination of colons no colons spaces. I tried this again and I still get the same error message when I try to save the work order. I'm using an app restriction for now for this particular case - but I would like to get it working for some other things.
> > >
> > > If you all can think of anything else ...
> > >
> > > Thnaks. Mary
> > >
> > > --- In MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> , "Shannon Rotz" <shannonrotz@> wrote:
> > > >
> > > > Good point, Ben! I missed that. It could very well be that’s the problem.
> > > >
> > > >
> > > >
> > > >
> > > >
> > > > Shannon
> > > >
> > > >
> > > >
> > > > From: MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> [mailto:MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> ] On Behalf Of Ben C
> > > > Sent: February-29-12 2:18 PM
> > > > To: MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com>
> > > > Subject: Antwort: Re: [MAXIMO List] Data Restriction Error
> > > >
> > > >
> > > >
> > > >
> > > >
> > > > Clarification:
> > > >
> > > > Could you see if you are putting a colon in front of vendor? If using Contional expressions for the restriction I noticed you have to have it in front of the field as well.
> > > >
> > > > --- In MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> , "Ben C" <ComptoBJ@> wrote:
> > > > >
> > > > > Mary,
> > > > >
> > > > > Could you see if you are putting a colon in front of vendor? If using Contional expressions for the restriction I noticed you have it in from the of the field as well.
> > > > >
> > > > > IE :vendor = :User
> > > > >
> > > > > --- In MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> , "Shannon Rotz" <shannonrotz@> wrote:
> > > > > >
> > > > > > Hi Andreas: I notice that you have a space between :user and the â€Å")”. In previous versions this used to be necessary. I thought that IBM had changed that, but maybe this particular spot is a throw-back.
> > > > > >
> > > > > >
> > > > > >
> > > > > > Mary: I would try putting a space there and see what happens. You never know …
> > > > > >
> > > > > >
> > > > > >
> > > > > >
> > > > > >
> > > > > >
> > > > > >
> > > > > > Shannon
> > > > > >
> > > > > >
> > > > > >
> > > > > > From: MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> [mailto:MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> ] On Behalf Of Andreas Brieke
> > > > > > Sent: February-29-12 7:17 AM
> > > > > > To: MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com>
> > > > > > Subject: Antwort: Re: [MAXIMO List] Data Restriction Error
> > > > > >
> > > > > >
> > > > > >
> > > > > >
> > > > > >
> > > > > > Hi,
> > > > > >
> > > > > > this can't be totally true.
> > > > > > I'm on 7.1.1.7 and have the following qualified datarestriction for users
> > > > > > who only may see tickets where they are owner of:
> > > > > >
> > > > > >
> > > > > > :owner = (select personid from maxuser where userid = :user ) or
> > > > > > :ownergroup in (select persongroup from persongroupteam where
> > > > > > resppartygroup in (select personid from maxuser where userid = :user)) or
> > > > > > changeby = :user
> > > > > >
> > > > > >
> > > > > > and this works.
> > > > > >
> > > > > >
> > > > > > regards,
> > > > > >
> > > > > >
> > > > > > Andreas Brieke
> > > > > >
> > > > > >
> > > > > > Oberfeldwebel Andreas Brieke
> > > > > > AndreasBrieke@ <mailto:AndreasBrieke%40bundeswehr.org>
> > > > > > Tel.: (0 22 26) 88 - 2 45 16
> > > > > > AllgFspWNBw: 34 05 - 2 45 16
> > > > > >
> > > > > > Streitkräfteunterstützungskommando
> > > > > > FüÃÅ"stg/G6 BtrbZ IT-SysBw SB 5
> > > > > > Tomburg-Kaserne
> > > > > > Münstereifelerstr 75
> > > > > > 53359 Rheinbach
> > > > > >
> > > > > >
> > > > > >
> > > > > > MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> schrieb am 29.02.2012 15:46:47:
> > > > > >
> > > > > > > Von: "Mary" <mmangier@ <mailto:mmangier%40scgov.net> >
> > > > > > > An: MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com>
> > > > > > > Datum: 29.02.2012 15:47
> > > > > > > Betreff: Re: [MAXIMO List] Data Restriction Error
> > > > > > > Gesendet von: MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com>
> > > > > > >
> > > > > > >
> > > > > > > Hi Shannon -
> > > > > > >
> > > > > > > Actually, I looked up a technote and realized I couldn't have a
> > > > > > > qualified data restriction with a variable.
> > > > > > >
> > > > > > > So, I changed it to a hidden data restriction. Yes, in security
> > > > > > > group. And that is the exact restriction. I have also tried the
> > > > > > > &username& and other variations. Again, this works fine if I hard
> > > > > > > code the vendor id. For the hidden restriction and the :user
> > > > > > > variable, all records are hidden, not just the ones where vendor=user.
> > > > > > >
> > > > > > > Thank you,
> > > > > > > Mary
> > > > > > >
> > > > > > > Maximo 7.1.1.8
> > > > > > >
> > > > > > > --- In MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> , "Shannon Rotz" <shannonrotz@> wrote:
> > > > > > > >
> > > > > > > > Where are you putting the restriction? In the security group data
> > > > > > > > restrictions tab? Is that the exact restriction, i.e.
> > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > > > Vendor = :user
> > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > > > ??
> > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > > > Shannon
> > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > > > From: MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> [mailto:MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> ] On Behalf
> > > > > > Of
> > > > > > > > Mary
> > > > > > > > Sent: February-28-12 12:33 PM
> > > > > > > > To: MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com>
> > > > > > > > Subject: [MAXIMO List] Data Restriction Error
> > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > > > I have a qualified data restriction on the workorder table for a
> > > > > > security
> > > > > > > > group. I only want the group to be able to access workorders where
> > > > > > > > workorder.vendor = user (vendor=:user). This works fine until I try to
> > > > > > make
> > > > > > > > any change to the workorder and save it. Then I get the error message
> > > > > > below.
> > > > > > > >
> > > > > > > >
> > > > > > > > BMXAA4017E - Object WORKORDER Site=SRQSITE Work Order=WO659649 is not
> > > > > > > > qualified according to the data restriction of this user.
> > > > > > > >
> > > > > > > > If I hard code the value for :user in the condition it works fine.
> > > > > > > >
> > > > > > > > Any suggestions?
> > > > > > > >
> > > > > > > > Thank you, Mary
> > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > >
> > > > > > >
> > > > > >
> > > > > >
> > > > > >
> > > > > >
> > > > > >
> > > > > >
> > > > > >
> > > > > >
> > > > > >
> > > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > >
> >
>


From: Mary (2012-03-20 15:21)

Thanks Shannon. I have changed the condition a to use ownergroup (to match our process) so it looks more like your below. This works fine. Maybe I needed a relationship to use the vendor=user condition. Anyway ...
--- In MAXIMO@yahoogroups.com, "Shannon Rotz" <shannonrotz@...> wrote:
>
> Actually, it turns out that I already had it. This is a group restriction in Security Groups.
>
>
>
> STATUS NOT IN ('DEFER','WAPPR') AND VENDOR = (SELECT VENDOR FROM PERSON, MAXUSER WHERE PERSON.PERSONID = MAXUSER.PERSONID AND USERID = :USER )
>
>
>
> It worked for them in V6.2.4, and AFAIK, the vendors were doing status changes.
>
>
>
> If that doesn’t work for you, I can check with them â€" they upgraded to V7 last year.
>
>
>
>
>
>
>
> Shannon
>
>
>
> From: Shannon Rotz [mailto:shannonrotz@...]
> Sent: March-15-12 11:07 AM
> To: 'MAXIMO@yahoogroups.com'
> Subject: RE: Antwort: Re: [MAXIMO List] Data Restriction Error
>
>
>
> Somebody I know did exactly the same thing, i.e. put on restrictions so vendors could log into the system and view only their work orders.
>
>
>
> I’ll check it out with them and get back to you.
>
>
>
>
>
>
>
> From: MAXIMO@yahoogroups.com [mailto:MAXIMO@yahoogroups.com] On Behalf Of Mary
> Sent: March-15-12 8:22 AM
> To: MAXIMO@yahoogroups.com
> Subject: Antwort: Re: [MAXIMO List] Data Restriction Error
>
>
>
>
>
> Also - we are tying user to vendor because the users are vendors who will be logging into Maximo and we need to relate the user record to the vendor record. We haven't quite decided how this is going to work so we are using userid = vendorid for now.
>
> --- In MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> , "Mary" <mmangier@> wrote:
> >
> > I have finally gotten back to testing this.
> >
> > I am using this restriction on a group that has access only to a quick reporting cloned app. If I use the :user variable I can save work logs and labor but I cannot save status changes or materials. When I hard code the userid instead of using the :user variable I can save any changes. It looks like it is having problems reevaluating :user during these operations.
> >
> > The expressions validate fine. I can use the vendor=:user expression in the app restriction and it also works fine - since it doesn't have to reevaluate.
> >
> > Any suggestions?
> >
> > Thank you, Mary
> >
> > --- In MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> , "Ben C" <ComptoBJ@> wrote:
> > >
> > > Okay lets go through this step by step... I was able to validate the expression works. Are you able to as well?
> > >
> > > Build the condition, expression type, Expression should be one of the following:
> > > :vendor=:user - Test expression against the work order object...
> > > :vendor=:&USERNAME& - Again test against Work Order object
> > >
> > > Does it comeback successful? If so then I would go so far as to say something else might be wrong?
> > >
> > > BTW Can you elaborate why users are tied to a Vendor/Company field? Just wondering is all... I would understand if you cannot explain why.
> > >
> > > Ben
> > > NSTec LLC
> > > Contractor to US Dept of Energy
> > >
> > > --- In MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> , "Mary" <mmangier@> wrote:
> > > >
> > > > I did try (most) every combination of colons no colons spaces. I tried this again and I still get the same error message when I try to save the work order. I'm using an app restriction for now for this particular case - but I would like to get it working for some other things.
> > > >
> > > > If you all can think of anything else ...
> > > >
> > > > Thnaks. Mary
> > > >
> > > > --- In MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> , "Shannon Rotz" <shannonrotz@> wrote:
> > > > >
> > > > > Good point, Ben! I missed that. It could very well be that’s the problem.
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > Shannon
> > > > >
> > > > >
> > > > >
> > > > > From: MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> [mailto:MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> ] On Behalf Of Ben C
> > > > > Sent: February-29-12 2:18 PM
> > > > > To: MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com>
> > > > > Subject: Antwort: Re: [MAXIMO List] Data Restriction Error
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > Clarification:
> > > > >
> > > > > Could you see if you are putting a colon in front of vendor? If using Contional expressions for the restriction I noticed you have to have it in front of the field as well.
> > > > >
> > > > > --- In MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> , "Ben C" <ComptoBJ@> wrote:
> > > > > >
> > > > > > Mary,
> > > > > >
> > > > > > Could you see if you are putting a colon in front of vendor? If using Contional expressions for the restriction I noticed you have it in from the of the field as well.
> > > > > >
> > > > > > IE :vendor = :User
> > > > > >
> > > > > > --- In MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> , "Shannon Rotz" <shannonrotz@> wrote:
> > > > > > >
> > > > > > > Hi Andreas: I notice that you have a space between :user and the â€Å")”. In previous versions this used to be necessary. I thought that IBM had changed that, but maybe this particular spot is a throw-back.
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > > Mary: I would try putting a space there and see what happens. You never know …
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > > Shannon
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > > From: MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> [mailto:MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> ] On Behalf Of Andreas Brieke
> > > > > > > Sent: February-29-12 7:17 AM
> > > > > > > To: MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com>
> > > > > > > Subject: Antwort: Re: [MAXIMO List] Data Restriction Error
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > > Hi,
> > > > > > >
> > > > > > > this can't be totally true.
> > > > > > > I'm on 7.1.1.7 and have the following qualified datarestriction for users
> > > > > > > who only may see tickets where they are owner of:
> > > > > > >
> > > > > > >
> > > > > > > :owner = (select personid from maxuser where userid = :user ) or
> > > > > > > :ownergroup in (select persongroup from persongroupteam where
> > > > > > > resppartygroup in (select personid from maxuser where userid = :user)) or
> > > > > > > changeby = :user
> > > > > > >
> > > > > > >
> > > > > > > and this works.
> > > > > > >
> > > > > > >
> > > > > > > regards,
> > > > > > >
> > > > > > >
> > > > > > > Andreas Brieke
> > > > > > >
> > > > > > >
> > > > > > > Oberfeldwebel Andreas Brieke
> > > > > > > AndreasBrieke@ <mailto:AndreasBrieke%40bundeswehr.org>
> > > > > > > Tel.: (0 22 26) 88 - 2 45 16
> > > > > > > AllgFspWNBw: 34 05 - 2 45 16
> > > > > > >
> > > > > > > StreitkrÃÆ'¤fteunterstÃÆ'¼tzungskommando
> > > > > > > FÃÆ'¼ÃÆ'Å"stg/G6 BtrbZ IT-SysBw SB 5
> > > > > > > Tomburg-Kaserne
> > > > > > > MÃÆ'¼nstereifelerstr 75
> > > > > > > 53359 Rheinbach
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > > MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> schrieb am 29.02.2012 15:46:47:
> > > > > > >
> > > > > > > > Von: "Mary" <mmangier@ <mailto:mmangier%40scgov.net> >
> > > > > > > > An: MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com>
> > > > > > > > Datum: 29.02.2012 15:47
> > > > > > > > Betreff: Re: [MAXIMO List] Data Restriction Error
> > > > > > > > Gesendet von: MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com>
> > > > > > > >
> > > > > > > >
> > > > > > > > Hi Shannon -
> > > > > > > >
> > > > > > > > Actually, I looked up a technote and realized I couldn't have a
> > > > > > > > qualified data restriction with a variable.
> > > > > > > >
> > > > > > > > So, I changed it to a hidden data restriction. Yes, in security
> > > > > > > > group. And that is the exact restriction. I have also tried the
> > > > > > > > &username& and other variations. Again, this works fine if I hard
> > > > > > > > code the vendor id. For the hidden restriction and the :user
> > > > > > > > variable, all records are hidden, not just the ones where vendor=user.
> > > > > > > >
> > > > > > > > Thank you,
> > > > > > > > Mary
> > > > > > > >
> > > > > > > > Maximo 7.1.1.8
> > > > > > > >
> > > > > > > > --- In MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> , "Shannon Rotz" <shannonrotz@> wrote:
> > > > > > > > >
> > > > > > > > > Where are you putting the restriction? In the security group data
> > > > > > > > > restrictions tab? Is that the exact restriction, i.e.
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > > Vendor = :user
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > > ??
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > > Shannon
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > > From: MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> [mailto:MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> ] On Behalf
> > > > > > > Of
> > > > > > > > > Mary
> > > > > > > > > Sent: February-28-12 12:33 PM
> > > > > > > > > To: MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com>
> > > > > > > > > Subject: [MAXIMO List] Data Restriction Error
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > > I have a qualified data restriction on the workorder table for a
> > > > > > > security
> > > > > > > > > group. I only want the group to be able to access workorders where
> > > > > > > > > workorder.vendor = user (vendor=:user). This works fine until I try to
> > > > > > > make
> > > > > > > > > any change to the workorder and save it. Then I get the error message
> > > > > > > below.
> > > > > > > > >
> > > > > > > > >
> > > > > > > > > BMXAA4017E - Object WORKORDER Site=SRQSITE Work Order=WO659649 is not
> > > > > > > > > qualified according to the data restriction of this user.
> > > > > > > > >
> > > > > > > > > If I hard code the value for :user in the condition it works fine.
> > > > > > > > >
> > > > > > > > > Any suggestions?
> > > > > > > > >
> > > > > > > > > Thank you, Mary
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > >
> > > > > > > >
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > >
> > >
> >
>
>
>
>
>
>
>


From: Shannon Rotz (2012-03-20 09:38)

This way is probably better anyway, since you can now have multiple people from the same vendor logging in and doing things. Just my $.02 worth …


Shannon

From: MAXIMO@yahoogroups.com [mailto:MAXIMO@yahoogroups.com] On Behalf Of Mary
Sent: March-20-12 8:22 AM
To: MAXIMO@yahoogroups.com
Subject: FW: Antwort: Re: [MAXIMO List] Data Restriction Error


Thanks Shannon. I have changed the condition a to use ownergroup (to match our process) so it looks more like your below. This works fine. Maybe I needed a relationship to use the vendor=user condition. Anyway ...
--- In MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> , "Shannon Rotz" <shannonrotz@...> wrote:
>
> Actually, it turns out that I already had it. This is a group restriction in Security Groups.
>
>
>
> STATUS NOT IN ('DEFER','WAPPR') AND VENDOR = (SELECT VENDOR FROM PERSON, MAXUSER WHERE PERSON.PERSONID = MAXUSER.PERSONID AND USERID = :USER )
>
>
>
> It worked for them in V6.2.4, and AFAIK, the vendors were doing status changes.
>
>
>
> If that doesn’t work for you, I can check with them â€" they upgraded to V7 last year.
>
>
>
>
>
>
>
> Shannon
>
>
>
> From: Shannon Rotz [mailto:shannonrotz@...]
> Sent: March-15-12 11:07 AM
> To: 'MAXIMO@yahoogroups.com <mailto:%27MAXIMO%40yahoogroups.com> '
> Subject: RE: Antwort: Re: [MAXIMO List] Data Restriction Error
>
>
>
> Somebody I know did exactly the same thing, i.e. put on restrictions so vendors could log into the system and view only their work orders.
>
>
>
> I’ll check it out with them and get back to you.
>
>
>
>
>
>
>
> From: MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> [mailto:MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> ] On Behalf Of Mary
> Sent: March-15-12 8:22 AM
> To: MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com>
> Subject: Antwort: Re: [MAXIMO List] Data Restriction Error
>
>
>
>
>
> Also - we are tying user to vendor because the users are vendors who will be logging into Maximo and we need to relate the user record to the vendor record. We haven't quite decided how this is going to work so we are using userid = vendorid for now.
>
> --- In MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> , "Mary" <mmangier@> wrote:
> >
> > I have finally gotten back to testing this.
> >
> > I am using this restriction on a group that has access only to a quick reporting cloned app. If I use the :user variable I can save work logs and labor but I cannot save status changes or materials. When I hard code the userid instead of using the :user variable I can save any changes. It looks like it is having problems reevaluating :user during these operations.
> >
> > The expressions validate fine. I can use the vendor=:user expression in the app restriction and it also works fine - since it doesn't have to reevaluate.
> >
> > Any suggestions?
> >
> > Thank you, Mary
> >
> > --- In MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> , "Ben C" <ComptoBJ@> wrote:
> > >
> > > Okay lets go through this step by step... I was able to validate the expression works. Are you able to as well?
> > >
> > > Build the condition, expression type, Expression should be one of the following:
> > > :vendor=:user - Test expression against the work order object...
> > > :vendor=:&USERNAME& - Again test against Work Order object
> > >
> > > Does it comeback successful? If so then I would go so far as to say something else might be wrong?
> > >
> > > BTW Can you elaborate why users are tied to a Vendor/Company field? Just wondering is all... I would understand if you cannot explain why.
> > >
> > > Ben
> > > NSTec LLC
> > > Contractor to US Dept of Energy
> > >
> > > --- In MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> , "Mary" <mmangier@> wrote:
> > > >
> > > > I did try (most) every combination of colons no colons spaces. I tried this again and I still get the same error message when I try to save the work order. I'm using an app restriction for now for this particular case - but I would like to get it working for some other things.
> > > >
> > > > If you all can think of anything else ...
> > > >
> > > > Thnaks. Mary
> > > >
> > > > --- In MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> , "Shannon Rotz" <shannonrotz@> wrote:
> > > > >
> > > > > Good point, Ben! I missed that. It could very well be that’s the problem.
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > Shannon
> > > > >
> > > > >
> > > > >
> > > > > From: MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> [mailto:MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> ] On Behalf Of Ben C
> > > > > Sent: February-29-12 2:18 PM
> > > > > To: MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com>
> > > > > Subject: Antwort: Re: [MAXIMO List] Data Restriction Error
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > Clarification:
> > > > >
> > > > > Could you see if you are putting a colon in front of vendor? If using Contional expressions for the restriction I noticed you have to have it in front of the field as well.
> > > > >
> > > > > --- In MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> , "Ben C" <ComptoBJ@> wrote:
> > > > > >
> > > > > > Mary,
> > > > > >
> > > > > > Could you see if you are putting a colon in front of vendor? If using Contional expressions for the restriction I noticed you have it in from the of the field as well.
> > > > > >
> > > > > > IE :vendor = :User
> > > > > >
> > > > > > --- In MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> , "Shannon Rotz" <shannonrotz@> wrote:
> > > > > > >
> > > > > > > Hi Andreas: I notice that you have a space between :user and the â€Å")”. In previous versions this used to be necessary. I thought that IBM had changed that, but maybe this particular spot is a throw-back.
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > > Mary: I would try putting a space there and see what happens. You never know …
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > > Shannon
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > > From: MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> [mailto:MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> ] On Behalf Of Andreas Brieke
> > > > > > > Sent: February-29-12 7:17 AM
> > > > > > > To: MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com>
> > > > > > > Subject: Antwort: Re: [MAXIMO List] Data Restriction Error
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > > Hi,
> > > > > > >
> > > > > > > this can't be totally true.
> > > > > > > I'm on 7.1.1.7 and have the following qualified datarestriction for users
> > > > > > > who only may see tickets where they are owner of:
> > > > > > >
> > > > > > >
> > > > > > > :owner = (select personid from maxuser where userid = :user ) or
> > > > > > > :ownergroup in (select persongroup from persongroupteam where
> > > > > > > resppartygroup in (select personid from maxuser where userid = :user)) or
> > > > > > > changeby = :user
> > > > > > >
> > > > > > >
> > > > > > > and this works.
> > > > > > >
> > > > > > >
> > > > > > > regards,
> > > > > > >
> > > > > > >
> > > > > > > Andreas Brieke
> > > > > > >
> > > > > > >
> > > > > > > Oberfeldwebel Andreas Brieke
> > > > > > > AndreasBrieke@ <mailto:AndreasBrieke%40bundeswehr.org>
> > > > > > > Tel.: (0 22 26) 88 - 2 45 16
> > > > > > > AllgFspWNBw: 34 05 - 2 45 16
> > > > > > >
> > > > > > > StreitkrÃÆ'¤fteunterstÃÆ'¼tzungskommando
> > > > > > > FÃÆ'¼ÃÆ'Ã…"stg/G6 BtrbZ IT-SysBw SB 5
> > > > > > > Tomburg-Kaserne
> > > > > > > MÃÆ'¼nstereifelerstr 75
> > > > > > > 53359 Rheinbach
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > > MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> schrieb am 29.02.2012 15:46:47:
> > > > > > >
> > > > > > > > Von: "Mary" <mmangier@ <mailto:mmangier%40scgov.net> >
> > > > > > > > An: MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com>
> > > > > > > > Datum: 29.02.2012 15:47
> > > > > > > > Betreff: Re: [MAXIMO List] Data Restriction Error
> > > > > > > > Gesendet von: MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com>
> > > > > > > >
> > > > > > > >
> > > > > > > > Hi Shannon -
> > > > > > > >
> > > > > > > > Actually, I looked up a technote and realized I couldn't have a
> > > > > > > > qualified data restriction with a variable.
> > > > > > > >
> > > > > > > > So, I changed it to a hidden data restriction. Yes, in security
> > > > > > > > group. And that is the exact restriction. I have also tried the
> > > > > > > > &username& and other variations. Again, this works fine if I hard
> > > > > > > > code the vendor id. For the hidden restriction and the :user
> > > > > > > > variable, all records are hidden, not just the ones where vendor=user.
> > > > > > > >
> > > > > > > > Thank you,
> > > > > > > > Mary
> > > > > > > >
> > > > > > > > Maximo 7.1.1.8
> > > > > > > >
> > > > > > > > --- In MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> , "Shannon Rotz" <shannonrotz@> wrote:
> > > > > > > > >
> > > > > > > > > Where are you putting the restriction? In the security group data
> > > > > > > > > restrictions tab? Is that the exact restriction, i.e.
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > > Vendor = :user
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > > ??
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > > Shannon
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > > From: MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> [mailto:MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> ] On Behalf
> > > > > > > Of
> > > > > > > > > Mary
> > > > > > > > > Sent: February-28-12 12:33 PM
> > > > > > > > > To: MAXIMO@yahoogroups.com <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com> <mailto:MAXIMO%40yahoogroups.com>
> > > > > > > > > Subject: [MAXIMO List] Data Restriction Error
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > > I have a qualified data restriction on the workorder table for a
> > > > > > > security
> > > > > > > > > group. I only want the group to be able to access workorders where
> > > > > > > > > workorder.vendor = user (vendor=:user). This works fine until I try to
> > > > > > > make
> > > > > > > > > any change to the workorder and save it. Then I get the error message
> > > > > > > below.
> > > > > > > > >
> > > > > > > > >
> > > > > > > > > BMXAA4017E - Object WORKORDER Site=SRQSITE Work Order=WO659649 is not
> > > > > > > > > qualified according to the data restriction of this user.
> > > > > > > > >
> > > > > > > > > If I hard code the value for :user in the condition it works fine.
> > > > > > > > >
> > > > > > > > > Any suggestions?
> > > > > > > > >
> > > > > > > > > Thank you, Mary
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > >
> > > > > > > >
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > >
> > >
> >
>
>
>
>
>
>
>