Question:
HR is requesting many roles setup with specific values in the "Personnel Area" field. I'm thinking about making this an org field so it's easier to maintain the roles.
Anyone have any negative/positive experience with making Personnel Area (or any other HR field levels) an org value in PFCG with pfcg_orgfield_create?
Thanks!
_________________
"SOX.. hmm .. Aren't they the baseball teams in Boston and Chicago?"
Kind Regards,
IamEvilHomer
(Wayne)
Answer:
We do this and it is the only instance where we used derived Roles.
We chose to use derived Roles because we have 40 different areas that our HR demanded be segregated but also specified that the access for all would be identical except for the personnel area.
I know John Jarboe does not like derived Roles but the risk of error in changing 40 at a time when you add or change access is soemthing we decide to avoid. Our process and design is fully documented so that, as John says, it will out live me and be understood by any one else who comes here to work on security.
_________________
Sandi
~~~~
Apparently Father Christmas, the Easter Bunny, the Tooth Fairy and Star Wars aren't real
Tuly kiwi.