Protecting Reports and Forms by Signing

Since MoneyWorks allows so much customisability of reports and forms, to the extent of being able to include information from pretty much anywhere in the database, it is necessary to be able to secure this avenue of data extraction.

The administrator can restrict access to reports and forms for particular users by a mechanism known as signing. This is controlled by the Signing and Using Unsigned Forms and Reports administration privilege. If you do not want a user to have access to reports and forms, you should turn this privilege off for that user. You can then make specific reports and forms available to that user (for the current document) by signing them for that user.

Note: Forms and Reports are signed to be used by particular users with a particular document.

Note: A user who does have the Signing and Using Unsigned Forms and Reports privilege may print any report or form without it having to be signed first, provided the report is not subject to a Check Privilege control.

Where do custom forms and reports go?

With single-user MoneyWorks, customised forms and reports are stored in a folder called MoneyWorks Custom Plug-Ins that is in the same directory as the MoneyWorks accounts data file.

With multi-user MoneyWorks, the accounts data file resides on the server, and cannot be seen from a client computer. Therefore, for clients who connect to a shared MoneyWorks document, MoneyWorks will provide access to custom reports and forms that it finds in the MoneyWorks Custom Plug-Ins folder—see Managing Your Plug-ins for information on this). If you are logging into a document hosted by MoneyWorks Datacentre, the server will deliver any custom plug-ins automatically.

To Sign Forms and Reports

  1. On the users computers, log in to the document using your administrator user name, and choose File>Users and Security
  1. Click the Signing button to display the Signing dialog box
  1. Select the user(s) for whom you wish to sign files
  1. Select the report and form files that you wish to sign.

The list will show all of the custom and standard forms and reports residing in the MoneyWorks Standard Plug-Ins and MoneyWorks Custom Plug-Ins folders on the computer that you are sitting at. You cannot sign standard reports, but note that access to these is generally controlled by one of user privileges. For example you cannot run reports based on the general ledger unless you have the Account Enquiry privilege.

  1. Click the Sign button

To see which users of the current document the form/report is currently signed for, select the file and click Check Signature.

Note: The form is signed on the local machine only. You will need to upload it to Datacentre (Uploading Reports and Forms) or manually copy it to Gold workstations.

To unsign a document You can unsign a document for particular users by following the steps for signing, but click Unsign instead of Sign.

If you are doing the signing on a computer other than the one that will be used by the unprivileged user, you will need to copy the files that you have signed into the MoneyWorks Custom Plug-Ins folder on that user’s computer.

If you are using MoneyWorks Datacentre you can use the Upload tab to upload the signed file to the server for automatic distribution to clients the next time they log in. See Uploading Reports and Forms.

The Revoke All button will revoke all signatures ever issued for the accounts document.

Note: If changes are made to forms and reports (even using an earlier version of MoneyWorks which does not know about signing) this will invalidate the signature. They will need to be re-signed before they can be used by unprivileged users.