Security - Folder Permissions M:\Macsql

[bruggles]

Does anyone know of any documentation on proper NTFS permissions for M:\macsql and underlying folders. Currently ours is set to Everyone which seems rather dangerous. Inadvertant deletion of files, etc.

Is it possible to lock these folders down? Is there any documentation on this?

We are running Progression 7.6.300 with MS SQL 2000 backend.

TIA

 

[abaldwin]

This is a long-standing issue with the macola system. I have removed Everyone and added back two groups Domain Admins and a group I created called MacolaUsers.

Both groups have to have Full access to the entire directory and its sub directories. This is not a complete solution but limits the rights to only those who are ligitimate Macola users.

Andy Baldwin

"Testing is the most overlooked programming language on the books!

 

[bruggles]

Alan,

Thanks for the reply. I actually called Macola tech support this AM and got a very lame answer. "Administration is up to you".

If fairness to end users we need to know how the software works, which folders the users need certain rights to to implement proper directory security, especially in the post Enron Fiscal compliance ERA.

We have several other packages that lock down their program files by their installer program during installation and set prudent NTFS permissions.

I sincerely wish Macola could provide this information in a help file or Best Practices paper vs. having to pay a consultant or for a tech support call.

 

[keain]

IIRC, create a security group called MacolaUsers or some such and give them full control to the data and users directory. Give them Read&Execute to the rest.

It's been a while since I worked for Macola, so I may not be 100% correct, but it should get you started.

 

[kscheeler]

The users need full rights to the DATA and DATA_XX folders along with the USERS and PWE folder. This is because the user temp file gets created in the USERS folder to track who is logged in and the reports and screen prints are stored in the DATA folders. The user also needs create/read/execute rights in the MACSQL root because if there is a VBA error, Macola will create the error log in the root.

You may or may not want to give certain people extra rights to the RPTS folder. If they want to modify an existing integrated crystal report, this is where they are stored.

The other folders like BIN, HELP, PROGRAMS, SCREENS, INSTALL, INSTFLEX, INSTMAC, LANGUAGE, MEDIA, MSL, UTILITY and VBAPRJ the users need read/execute permissions for.

Kevin Scheeler

 

[bruggles]

This is great information thanks to you both.

Why can't Macola tech support furnish an end user with this basic information? Especially when you are paying them $$$ for the call. Additionally I would think they might add this to their software documentation and or web site.

 

[abaldwin]

bruggles,

I do not know your current sitsuation, but you are probably not paying Macola for support (if you are then yes they should have given you a better answer than that). Yes, you pay maintenance every year to keep your software up-to-date but unless you have support directly from Macola, your VAR should be answering these types of questions. As for why Macola does not post these tyeps of answers......who knows. Sounds though like you and your VAR need to have a heart-to-heart.


Andy Baldwin

"Testing is the most overlooked programming language on the books!

 

[bruggles]

Andy,
For clairification we do pay maintenance and we do purchase support thru Macola under the six pack program. This latest call on folder permissions was using an incident from a pre payed six pack.

We don't mind paying for calls $$$ (most are always to report bugs) but expect a little better answer from them than what I received. This answer was after I was transferred from their front line people over to one of their supposed "SYSOPS" named Dale.

We take care of our business customers, Exact appears to care little of theirs.

Anyways have another little tip for all that we discovered a couple years back (macola probably doesn't want anyont to know) - Simply remove ACL permissons from your Macsql\users folder and you can restrict and enforce access to the Macola software. Handy for month end process or doing other maintenance in the software.

thanks
thanks