News
Abstract
Standard services within the integration framework require manual configuration by an Administrator to support the use of Security Authorization level that is configured through the Maximo security applications.
Content
The support for standard services within the integration framework require manual configuration by an Administrator to support the use of Security Authorization that is configured through the Maximo security applications. This will allow an integration framework standard service transaction to take on the same security profile for the transaction user as if that user entered the transaction through a corresponding Maximo application.
To do this, the integration framework provides an additional security table (MAXSERVSECURITY) that allows the Maximo authorization security to apply to transactions that come into Maximo via a Standard Service.
The Steps to enable this security:
- An application service must be created (if it doesn't already exist) and registered through the database configuration application
- The method in the application service needs to be properly annotated
- Sigoption needs to be created for the service method
- Sigoption needs to configured for the applicable application.
- A sql script is needed to update the MAXSERVSECURITY table.
An insert statement for the MAXSERVSECURITY needs to include the following fields:
- MAXSERVSECURITYID – unique ID that is numeric – suggest selecting the max(MAXSERVSECURITYID) from MAXSERVSECURITY and using the next sequential value
- ROWSTAMP – unique ID that is numeric – suggest selecting the max(ROWSTAMP) from MAXSERVSECURITY and using the next sequential value
- SERVICENAME – the service name registered in the Database Configuration application (MAXSERVICE.SERVICENAME)
- APP – the application name where the Sigoption was configured to (MAXAPPS.APP)
- METHODNAME - the name of the annotated method in the application service.
- OPTIONNAME - this needs to be derived from the sigoption table for the application/sigoption combination. (SIGOPTION.OPTIONNAME)
Implementation Considerations: Security Authorization support by standard services has one limitation in that it does not support the user of Conditions: conditional security expression applied to function. Maximo security features include the support of conditional security, meaning security could define that a user can approve POs only if the PO is less than $10,000. Access to the PO approval will apply to the integration transaction but the condition of ‘less than $10,000’ will not.
Was this topic helpful?
Document Information
Modified date:
13 April 2021
UID
swg21445805