Quick question for you all. I have often wondered what is to keep someone with access to HR11 from changing his or her own HR security Level.
I have three people who need access to HR11 for one reason or another but I don't want them to see anyone's pay.
So I have locked down the pay field using HR security but it seems like since they have access to their own record they can just go into HR11 and change their level below that field and see it again. Am I wrong about this? I haven't tried it yet cause I've got too many things to do, I thought someone might have a streight answer.

J

You could use LAUA to put a conditional restriant of data access on their own record. For example: Where Employee <> [Their Employee Number]. Then they would be able to pull up everyone else HR11 records but their own.

You could also take away the ability to go into HR09 which is where you would set up the security level for those employees.

If you really don't want them to see anybody's pay including their own, you can remove the pay fields (there are several, I have a list somewhere) within File Security in laua. Then you don't have to deal with HR09 access, conditions, etc. We've tried to avoid the whole security level/location thing whenever possible.