Use the VA Data Security Setup form to secure datatypes.
When securing datatypes, you will select the datatype that requires security and then indicate to which tables the security applies.
To secure datatypes:
- In the VA Data Security Setup form, enter a datatype in the Datatype field. Press F4 for a list of valid datatypes.
- Select the Secure Datatype checkbox.
- Enter a security group in the Default Security Group field. Note: The system automatically grants this security group access to any new instance of the specified datatype. If you do not assign a default, you must manually assign access in VA Data Security Access.
- Save the record. The system displays a dialog box asking if you want to update all instances of the specified datatype with the new default security group.
- Click Yes to have each instance of the datatype set to the specified default security group. Note: If you click No, the system sets the security group to blank for each applicable instance and you will need to assign security manually. For more information, see VA Data Security Access.
- On the Secure Tables tab, check the Apply Security box for each table that requires security.
The system checks the Not Synchronized box for each table that you select. Note: When the Not Synchronized box is checked, it means that you have not yet updated security for the table.
- Click the Regenerate Views button. The VA View Generator form displays.
- Use the VA View Generator form to regenerate views. For more information, see VA View Generator.
Close VA View Generator.
Focus returns to VA Data Security Setup. The system checks the Secured box for each table that was previously unsynchronized.
Note: When the Secured box is checked for a table, this indicates that datatype security is active.
- Use VA Data Security Access to assign access permission for any other security groups, as necessary.
If you change the default security group for a secured datatype, a message displays indicating that the default security group has changed and asks if you wish to update all instances with the new default security group. Click Yes to have the system update all instances currently assigned the previous default security group (or where the security group is blank) with the new security group. The system leaves all other instances intact.Note: If Application Role Security is on, views grant modification access to users logged in through the system. If Application Role Security is off, views grant access to all permissions, including third-party tools. For more information, see VA Application Role Security.