From drigg at sbc.edu Thu Jul 3 13:15:13 2008
From: drigg at sbc.edu (David Rigg)
Date: Thu Jul 3 13:15:43 2008
Subject: [CC] Removing SSNs as IDs in Banner
Message-ID: <190B40A0CE9B458EAF3E0DECA8DD02B0@DLRPC10>
I have another variation of removing SSNs as IDs in place in the PPRD
instance/
This one affects only people (i.e., those with a record in SBPPERS) and
makes no changes to other SPRIDEN records. This means that the current
record for a corporation is the same as it is in PROD (i.e., not the PIDM).
For people, this variation uses Pnnnnnnnn as the only ID (more about this in
a bit), there are no ID changes, but there are name changes. A few dozen
people had "name change" entries where the only thing that changed was the
ID. In those few cases, the earliest record was retained and the later
record was treated as an ID change and removed.
My thoughts on getting rid of all ID changes relates to what's left after
you get rid of SSNs as IDs. What I found was (1) IDs generated by Banner,
(2) IDs generated prior to the conversion to Banner, (3) typos when entering
the SSN as ID and that's about it. Those would generally not be known to
the individual or useful in distinguishing one person from another.
I would appreciate any feedback on this approach, specifically,
* Whether having other than Pnnnnnnnn for the current ID for a
corporation makes sense.
* Whether generated IDs other than Pnnnnnnnn serve a useful purpose
* Issues associated with having multiple records per PIDM having
Pnnnnnnnn as an ID
We've discussed issues involved with not having SSNs as IDs (i.e., needing
to do a search to determine the ID if the person doesn't know it, but knows
their SSN). If you've discovered other issues or found work-arounds to
issues we've discussed it would be good to hear about those too.
I will be meeting with Senior Staff to discuss the alternatives on 7/15.
PPRD is http://gandhi.noc.sbc.edu:7575
Once we settle on an approach, you will have time to review it in PPRD
before it goes into PROD.
Dave
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.sbc.edu/pipermail/banner-coordinating-committee/attachments/20080703/afdd5897/attachment.html
From drigg at sbc.edu Wed Jul 16 16:40:36 2008
From: drigg at sbc.edu (David Rigg)
Date: Wed Jul 16 16:40:56 2008
Subject: [CC] Eliminating SSNs as IDs
Message-ID: <0A0F6ADC065C4A60B5A42247ECEB3FAA@DLRPC10>
Skipped content of type multipart/alternative-------------- next part --------------
A non-text attachment was scrubbed...
Name: SSN as ID 20080716 Sr Staff Meeting.doc
Type: application/msword
Size: 583168 bytes
Desc: not available
Url : http://mailman.sbc.edu/pipermail/banner-coordinating-committee/attachments/20080716/b89e80cd/SSNasID20080716SrStaffMeeting-0001.doc
From aagaard_t at sbc.edu Thu Jul 17 14:25:02 2008
From: aagaard_t at sbc.edu (Teresa Aagaard)
Date: Thu Jul 17 14:25:24 2008
Subject: [CC] Eliminating SSNs as IDs
In-Reply-To: <0A0F6ADC065C4A60B5A42247ECEB3FAA@DLRPC10>
References: <0A0F6ADC065C4A60B5A42247ECEB3FAA@DLRPC10>
Message-ID: <487F8E7E.6080401@sbc.edu>
David,
I was trying to look at the list of people with SSN access on PPRD, but
I seem to have lost my security access to the form goafbpr. Maybe the
last time PPRD was cloned? Anyway, you had given me access and told me
about it in an e-mail dated April 25. Of course, I looked at the table
with sqlplus, but wanted to let you know I can't get into the form any more.
thanks,
T
David Rigg wrote:
> The attached is a handout I provided to Sr. Staff while discussing
> their interest in eliminating SSNs as IDs. They would like for us to
> implement this in production prior to registration for the fall term.
>
>
>
> It can be done almost any time. It will take about 30 minutes to make
> the changes to SPRIDEN in PROD.
>
>
>
> The result will look very much like PPRD. At the moment, the list of
> people with SSN access in PPRD is fairly short, so there may be a
> brief flurry of activity adding people to the SSN access list when we
> go live. (In which case, it might be better to go live well in
> advance of fall registration.)
>
>
>
> We need to set a date to implement this and we need to ensure that all
> Banner users know that it is coming. You may wish to inform those
> using your systems. I will follow up with an e-mail to all Banner users.
>
>
>
> PPRD is http://gandhi.noc.sbc.edu:7575
>
>
>
> The changes will propagate to other instances as they are cloned. If
> you would like to implement the changes in other instances without
> cloning let me know.
>
>
>
> Do you have a preferred date?
>
>
>
> Thanks,
>
> Dave
>
>------------------------------------------------------------------------
>
>_______________________________________________
>Banner-coordinating-committee mailing list
>Banner-coordinating-committee@mailman.sbc.edu
>http://mailman.sbc.edu/mailman/listinfo/banner-coordinating-committee
>
>
--
Teresa W. Aagaard
Programmer/Senior Analyst
Sweet Briar College
Computer Services
434-381-6304
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.sbc.edu/pipermail/banner-coordinating-committee/attachments/20080717/31173e25/attachment.html
From drigg at sbc.edu Thu Jul 17 15:09:30 2008
From: drigg at sbc.edu (David Rigg)
Date: Thu Jul 17 15:09:34 2008
Subject: [CC] Eliminating SSNs as IDs
In-Reply-To: <487F8E7E.6080401@sbc.edu>
References: <0A0F6ADC065C4A60B5A42247ECEB3FAA@DLRPC10>
<487F8E7E.6080401@sbc.edu>
Message-ID:
Thanks Teresa,
You should have access to it now.
Dave
_____
From: banner-coordinating-committee-bounces@ripley.sbc.edu
[mailto:banner-coordinating-committee-bounces@ripley.sbc.edu] On Behalf Of
Teresa Aagaard
Sent: Thursday, July 17, 2008 2:25 PM
To: SBC Banner2000 Coordinating Committee
Subject: Re: [CC] Eliminating SSNs as IDs
David,
I was trying to look at the list of people with SSN access on PPRD, but I
seem to have lost my security access to the form goafbpr. Maybe the last
time PPRD was cloned? Anyway, you had given me access and told me about it
in an e-mail dated April 25. Of course, I looked at the table with sqlplus,
but wanted to let you know I can't get into the form any more.
thanks,
T
David Rigg wrote:
The attached is a handout I provided to Sr. Staff while discussing their
interest in eliminating SSNs as IDs. They would like for us to implement
this in production prior to registration for the fall term.
It can be done almost any time. It will take about 30 minutes to make the
changes to SPRIDEN in PROD.
The result will look very much like PPRD. At the moment, the list of people
with SSN access in PPRD is fairly short, so there may be a brief flurry of
activity adding people to the SSN access list when we go live. (In which
case, it might be better to go live well in advance of fall registration.)
We need to set a date to implement this and we need to ensure that all
Banner users know that it is coming. You may wish to inform those using
your systems. I will follow up with an e-mail to all Banner users.
PPRD is http://gandhi.noc.sbc.edu:7575
The changes will propagate to other instances as they are cloned. If you
would like to implement the changes in other instances without cloning let
me know.
Do you have a preferred date?
Thanks,
Dave
_____
_______________________________________________
Banner-coordinating-committee mailing list
Banner-coordinating-committee@mailman.sbc.edu
http://mailman.sbc.edu/mailman/listinfo/banner-coordinating-committee
--
Teresa W. Aagaard
Programmer/Senior Analyst
Sweet Briar College
Computer Services
434-381-6304
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.sbc.edu/pipermail/banner-coordinating-committee/attachments/20080717/b304d854/attachment.html
From drigg at sbc.edu Thu Jul 24 17:01:34 2008
From: drigg at sbc.edu (David Rigg)
Date: Thu Jul 24 17:02:11 2008
Subject: [CC] Removing SSNs as IDs
Message-ID: <4BEE1FAF65B04269B817D1B50DDC684E@DLRPC10>
Tracey found a feature in General 7.5 that when properly configured and
authorized enables entering the SSN in the ID field in lieu of the ID.
I have configured the PPRD instance to use this. For the moment, all Banner
users in PPRD are authorized to enter the SSN in the ID field (SSN_SEARCH
added to the G_MINIMUM_TO_ACCESS_BANNER_C class). If that turns out to be
too permissive, then I can move it to another class and synchronize
assignments to that class with assignments to the SSN_ACCESS profile in
GORFBPR so that it happens more-or-less automatically.
The impact of the overall changes in PPRD should be that only designated
individuals will be able to see the SSN on any Banner form. Anyone can
enter a SSN to retrieve a record.
Team Leads may assign users to the SSN_ACCESS profile using the Banner form
GOAFBPR.
To view the changes in PPRD:
http://gandhi.noc.sbc.edu:7575
Dave
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.sbc.edu/pipermail/banner-coordinating-committee/attachments/20080724/52942520/attachment.html