Upgrade Guide for DB2 UDB for z/OS > Database and UI Upgrade Planning >

About Upgrading Access Control

Upgrades: Releases 7.0.x.

Environments: All environments.

Access control was significantly revised in Release 7.5. Access control refers to all mechanisms that control visibility of screens, views, and data within Siebel Business applications. Access control includes, but is not limited to positions, responsibilities, organizations, and access groups.

To implement access control within your Siebel Business applications, your Siebel administrator creates relationships between people and resources (a more general term for data that includes views and functionality). These relationships or policies are authorizations. Both people and resources can be grouped and placed in hierarchies to simplify administration.

External users, such as customers and channel partners, can be assigned varying access levels that control visibility of data and application functionality. When planning access policies, consider the following:

• The complexity of access control policies (one data item or group of data items can be accessed by one or many users or groups, but not by all).
• The amount of content that is distributed by the Siebel Business applications, including Master data (data that is static and referential, such as Products) and Customer data (data that is created and managed by users of applications, such as Opportunities).
• The number of users and entities that access the data. Also consider the complexity of relationships between users (partners, competitors, browsers, customers).

For more information on access control, see Security Guide for Siebel Business Applications.

Person, Household and Service Request Visibility

Beginning with Release 7.5, Person, Household, and Service Request can be made visible to multiple organizations, also called Business Units. Release 7.5 introduced several new tables to support this:

• S_CONTACT_BU
• S_ORG_GROUP_BU
• S_SRV_REQ_BU

If you are upgrading from a pre 7.7.x release, the upgrade populates the S_CONTACT_BU, S_ORG_GROUP_BU, and S_SRV_REQ_BU tables with one record for each record in the S_CONTACT, S_ORG_GROUP, and S_SRV_REQ tables. After the upgrade, Contacts, Households, and Service Requests continue to be visible from the Business Unit they belonged to before the upgrade.

Access Group and Userlist Attributes

In Release 7.5, two new Siebel Extension tables were added to the S_PARTY, S_PARTY_GROUP and S_USERLIST tables to hold Access Group and User List attributes, respectively.

If you are upgrading from a pre 7.7.x release, the upgrade adds records to the S_PARTY_GROUP and S_USERLIST tables for existing S_PARTY Access Group and User List records.

To support Multi-Org visibility, the upgrade also adds corresponding intersection table records to the S_PARTY_GRP_BU and S_USERLIST_BU tables.

Technical Note 312 provides guidance and best practices for implementing access control. This Technical Note includes background information about the Access Group access control mechanism implemented in Siebel 7, discusses migration considerations, and outlines steps for deploying Access Group access for Siebel Business applications.

For detailed information about access control, see Security Guide for Siebel Business Applications.