<%@LANGUAGE="JAVASCRIPT" CODEPAGE="65001"%> TRAIN TRACK Help - Security

Back to Help Menu

TRAIN TRACK Web Version User Manual

Security and User Access

 

Security

 

This application uses multiple security layers to ensure the confidentiality and integrity of your data: network security, database security, and application security.

The first layer of security is provided by your network. Only authorized personnel should have access to the area of your network where the application is stored. We recommend providing access to IT experts only, and not to any of the end users of the application.

The second layer of security is provided through the database. Only the database administrator should have direct access to the database, and the end users should not have access.

The third layer of security is provided within the application. Each user must be given a distinct user name and password, and assigned an access level. Do not allow any generic logins or shared user names. Each screen within the application is restricted based on user access level. Available user access levels are described below.

 

Timeout

The application will timeout after a period of inactivity and require the user to log in again.

 

User Setup

 

The program itself requires no setup on the user's machines. Within the program, you will need to set up your user permissions.

To set up the initial admin user, navigate to the page AdminSetup.asp and click the "Setup" button. This will add a user to your database with the user name "Admin" and password "admin", under the user level of "Administrator". Once this user is set up, you may use it to log in and edit additional user accounts. When finished, you may delete the user or change the password. You may also delete the setup page to prevent further use.

To set up additional users, from the navigation panel, select Add User. Type in a user name and password, select a user level, and select the employee name, and click "Add".

To edit users, from the navigation panel, select User List, and click on the name of the user you wish to edit. Edit the details and click "Save".

To delete a user, from the navigation panel, select User List, and click on the name of the user you wish to delete. Click "Delete".

 

To set up users from SQL Management Studio, open the table tblPswd. Enter the following:

Column: Data:
User User login name
Password Password
UserName User acces level
Confirm User login name

Available user access levels are:

User Level
Edit Users
Edit All Records
View All Records
Edit Subordinate Records
View Own Status, Enroll in Classes, Take Exams
License Required
Administrator
Yes
Yes
Yes
Yes
Yes
Yes
Standard
Yes
Yes
Yes
Yes
Yes
Read-Only
Yes
Yes
Limited
Yes
Yes
Yes
Employee
Yes

 

Administrator level may edit all records and edit users.

Standard level may edit all records, but not edit users.

Read-Only level may not edit any records.

Limited level may only view records for their self and their subordinates, and add employees and training completions.

Employee level may only log on to take exams, enroll in classes, and view their status.

 

Login

 

If you try to open the application without logging in, you will be redirected to the login page to log in. On the login page, type your user name and password and click "Login".

Throughout the program, your login name is displayed on the top right corner of each screen, along with a link to log out.