<body><script type="text/javascript"> function setAttributeOnload(object, attribute, val) { if(window.addEventListener) { window.addEventListener("load", function(){ object[attribute] = val; }, false); } else { window.attachEvent('onload', function(){ object[attribute] = val; }); } } </script> <iframe src="http://www.blogger.com/navbar.g?targetBlogID=3207116622901103255&amp;blogName=crewNeckTech&amp;publishMode=PUBLISH_MODE_SFTP&amp;navbarType=BLACK&amp;layoutType=CLASSIC&amp;homepageUrl=http%3A%2F%2Fwww.crewnecktech.com%2F&amp;searchRoot=http%3A%2F%2Fblogsearch.google.com%2F" marginwidth="0" marginheight="0" scrolling="no" frameborder="0" height="30px" width="100%" id="navbar-iframe" title="Blogger Navigation and Search"></iframe> <div></div>

About

"I am Jon Pierce, the crewNeckTech. I am employed full-time at Crossroads Community Church as the Technology Specialist. Fulfilling this title pretty much makes me in charge of anything with current flowing through it... This ranges from our 1 electronic stapler, to our 6 servers, to our 8 Rooftop HVAC units, and to our 64 input video switcher."

    Archives

    Shelby "Contributions Inquiry" Wednesday, August 6, 2008 |

    Wow, Found a real problem today. I was poking around Shelby EZ-View trying to find a nice easy way to export a vCard or something to jump into my Outlook contacts. So I was right-clicking here and there, and what did I find? Something called "Contributions Inquiry." Hmm... I thought, that's odd, I don't have rights to contributions. (I should know, I set the rights...) So looked up myself, and went for it. Bam! There it was, my contributions history. I dash into Shelby and log in as the system supervisor, check my "security group", and sure enough no rights at all to anything in the contributions module. Wanting to rectify this immediately, I give Shelby a call, and they quickly let me know about an option under membership and prospects entitled, "Contributions Inquiry"... So I zap those Inquiry rights from those two modules from that "group" and lo and behold the option for the inquiry is removed from my EZ-View.

    I hate to think how easily that could've turned into a big mess, but I am left with these 3 thoughts.
    1. I need to read more documentation.
    2. I need to try and "break" into the system more.
    3. Why would Shelby put contributions permission stuff in the other modules security sections? OR if it makes sense to them, maybe a link to it from the contributions module's security sections?
    Please note that these are in order, I have no doubt that if I was more careful in my setup I would've caught it before it had the ability to become an issue.

    By the way, the reference to security groups is really a little, fun poke because security groups don't exist, but there is an option called, "Set security equal to", and that's what I use for my "security groups." I create an "individual" with the name group combined with a name for the group, and set permissions for that "group" on those security settings. Then on actual individuals, I set their security permissions equal to that "group." Not beautiful, but it's certainly a lot easier to manage than 30 users permissions individually.

    Labels: , ,