STARK Version 5.1.35.84XX Security Updates

Chapter Links

Description of the Enhancement

MKS Validate

An MKS Validate stand-alone Utility has been created with similar functionality to the Validate Database function within MKMS.

Company Settings

The Company Settings dialog has been completely redesigned.

▪Now there are five columns in the Grid:

1.Section - Starting with a No Section entry, and then listing the other settings which control various functions/features with the MKMS suite of programs and apps

2.Setting Name - The specific name for a Setting

3.Setting Value - A numeric value, logical (Y/N, T/F), or text entry associated with the selected Setting Name

4.Description - Currently left blank

5.Edit - Click the Edit box to open the Company Setting Name Edit dialog  

▪There is also a Search Box field at the top of the Company Settings Form.  To display the Setting Names for a specific Section (or Sections) containing a specific set of characters

a.Enter the characters to be located in that Search Box

b.Click the Search button

c.The Section(s) and/or Setting Names containing those characters will be listed

d.Re-Sort the Setting Name Column to make locating the desired Company Setting, it appropriate

e.Inspect the Setting Name column to locate the desired Setting Name

Email Account

A new Email Account maintenance Form where specific SMTP Email settings may be identified.

▪The SMTP Setup tab on the Employee Form now contains a Drop-Down Selection List of the previously defined Email Account settings. (see Employees - SMTP Setup tab below)

Employees

SMTP Setup tab

The SMTP Setup tab on the Employee Form has been changed.

▪This SMTP Setup tab now contains a Drop-Down Selection List of the previously defined Email Account settings.

✓An SMTP setting must be identified for each Employee who will be receiving/sending Reports, Invoices , Proposals, Work Orders, Statements, etc., via Email using a Mail Server other than Microsoft® Outlook®.

✓If no SMTP Setup data is entered for an Employee who is sending Reports, Invoices , Proposals, Work Orders, Statements, etc., via Email, the system will use the default Microsoft® Outlook® (and/or Outlook Express®) Email Account.

Employees

▪The keyboard's Insert (to start a new entry on an Employees Form tab with a Grid format), Delete (to remove an existing entry on an Employees Form tab with a Grid format); plus the Ctrl+S combination (for Save) have been implemented.

▪The Left and Right Arrow Navigation Keys will move the focus from one Employees Form tab to another has been implemented, as has the Ctrl+Insert combination to start a new record on the Employees Form;

Employees

The Personal tab on the Employees Form now has a new EmployeeType selection named Sales to be assigned to those Employees who are specifically classified as Salespersons

▪When assigning a Salesperson to a Subscriber, Prospect, Invoice or Proposal: only those Employees whose Employee Type is identified as either Sales or All will be available (in the Drop-Down Selection List) for populating the Salesman (or Commission To) fields.

The Security tab on the Employees Form now has a new Employee Team field.

▪A Drop-Down Selection List provided to Choose the Employee Team to which this Employee is to be assigned (if appropriate).

The Image File on the Security tab may now be either a ".BMP" (saved with 256 or less colors), or a "JPG" file type and either may be no larger than 64K.

The Security tab on the Employees Form has a new field named: Super User Authority? - Check this box to grant the currently selected Employee with Access Rights that are very similar to that of ADMIN.

▪These enhanced Access Rights include access to the Employee Groups Form and the Security tab on the Employees Form

Employee Groups

There is a new Field Access tab on the Employee Groups Form

▪This new/updated tab enables specifically assignable Access Rights to be granted on a Field by Field basis for each Form to which the currently selected Employee Group has been granted Access Rights.

▪The Forms which currently have this Field by Field access permission option are:

oAccounting Receivable Section on the Edit Tab of the Subscribers Form

oAreas Form

oCentral Station Data Form

oEmployee Form

oPayment Allocations Form

oPeople To Call Form

oProspect Form

oReceipts Form

oReceipt Allocation Form

oRecurring Revenue Form

oSale-Purchase Item Form

oSubscriber Form

oVendor Form

▪Other Forms may be added to the Field Access tab from time to time.

Form Names

Employee Groups

User Access Rights

Form Names, along with the permitted Forms Based Access Rights established using both the Employee Groups and the User Access Rights Forms, are used to assign Security & Access Management Rights to Employees.

▪A complete list of all Form Names and the actual Form each of these represent is now available.

MKMS STARK & MKMSCS UL

Security & Access Management

Central Station Monitoring

UL 1981 Third Edition

Installation Requirements

This chapter outlines the security related requirements of the Third Edition UL® 1981 Standard

Add/Delete Users

UL® Password and Username Requirements: As part of properly implementing the Third Edition UL® 1981 Standard, specifically for compliance with section 6.2 Sign-on Security of the Third Edition UL® 1981 Standard, the creation of Passwords is strictly defined.

Change Password

Add/Delete Users

When the UL® 1981 Version is Registered (i.e., Active), the Company Settings CheckULPasswordRestrictions option is set to True ("T") to comply with Section 6.2.6 relating to Password Restrictions in the Third Edition UL® 1981 Standard.

When the CheckULPasswordRestrictions option is set to True ("T") in Company Settings, the Password Requirement legend on the Change Password Form and the Add/Delete Users Form has been updated to more clearly identify those UL® requirements for password creation.

Change Passwords

Change Passwords:   Passwords must be created using the UL® Sign-on  Security requirements:

▪UL® Password and Username Requirements: As part of properly implementing the Third Edition UL® 1981 Standard, specifically for compliance with section 6.2 Sign-on Security of the Third Edition UL® 1981 Standard:

6.2.1 - The Employee's Password (i.e., Passcode) shall consist of the following:

a)A Username of at least six (6) characters

b)A Password which shall consist of a minimum of six alpha-numeric characters with at least one alpha and one numeric character

6.2.6 - The automation system shall prevent:

a)Repeated passwords, used within the last six changes;

b)Passwords that are a derivative of the user name(s); and

i.[e.g., Password cannot contain 50% of a Username so a User "Stacy" cannot have a Password of "STA3841"]

c)Passwords that are simply letters or numbers in order (e.g.: abcd, 1234, etc.).

i.[e.g., any type of sequence is prohibited such as 'ab', '34', '89', 'xy']

Employee Hired/Terminated

This is the new Employee Hired/Terminated report (documented to comply with the Third Edition UL® 1981 Standard) which provides a list of the Company's Employees is displayed in a functioning Grid dialog with an Employee Trace Form Title:

▪It provides a list of the Employees - retrieved based on their Hire, Termination, or original Entry Date - that is displayed in Grid format and so may then be viewed, sorted, filtered, reconfigured, printed, emailed, and/or exported.

Review Deleted Entities

A new Entities Drop-Down Selection List field has been added to the Review Deleted Entities Form where previously deleted Proposals were not included.

▪Entities - By default, All deleted entities (e.g., Invoices, Bills, Receipts, Proposals, etc.) will be listed based on the selected Filter type and Date Range.

oUsing the Drop-Down Selection List provided, you may also Choose to list only one type of Entity.

oIf Proposals are selected, you may Choose whether to list the deleted Proposals for Prospects (the default) or Subscribers.

▪The Restore option on the Review Deleted Entities Form can now restore Proposals including data entered in the Proposal Items, Recurring Items, Job Tasks, and Options tabs, when present.

Employees Form

Personal Tab

Security Tab

There is a new E-Signature field and E-Signature Icon (shown above) on the Personal Tab of the Employees Form that provides the ability to store an Electronic Signature for an Employees. The Electronic Signature dialog - where the Electronic Signature is actually created - is accessible by Clicking the E-Signature Icon.

▪This E-Signature Icon is only active when a User has been given the appropriate Access Rights to the Electronic Signature Form. 

▪These Access Rights are provided by including the Electronic Signature Form in the Employee Group to which the Employee is a member (in the Security Access Group field within the Security tab of their Employee Form), and/or by specifically adding the Electronic Signature Form to the User Access Rights Form for this User.

When entering the Employee's User Name in the Database User Name field in the Security tab of their Employee Form, if the CheckULPasswordRestrictions option is set to False ("F"), the UL® Password and Username Requirements Password Restrictions feature will be turned off.

Employee Groups

Password Field Access:

If your Company needs to restrict access to the Password field on the Central Station Data Form within the Monitoring tab, but still allow access to the other Fields on this Form, you may now simply remove the Check from the Password item in the Fields tab of the Employee Groups Form for the Central Station Form.

▪The result would be that no Employee assigned to this Employee Group would have access to that Password field.

▪In a similar manner, access to most of the other Fields on this Central Station Data Form may also be controlled.

➢Note: It is important to remember that when an Employee has specific rights assigned by using the User Access Rights Form, those rights granted or restricted by using the User Access Rights Form will override those granted or restricted on the Employee Groups Form!  

When restricting or granting any rights or access to a Form or a Field, be certain that those restricted or granted rights are not negated in the User Access Rights Form

User Login History

The new User Login History Report (designed and documented to comply with the Third Edition UL® 1981 Standard) will list those Employees who have attempted to, or successfully Logged Into the MKMS database (mkmsdefault.db).

▪Because this is a true Grid (see the Grids & Lists - Print Preview - Exporting Data chapter for much more information), it offers the Filtering, Configuration, Sorting, Printing, Emailing and Export capabilities that are inherently part of an MKMS based data grid

Employee Groups

The Employee Groups Form allows you to define which Access Rights will be available to the Employee (on a Form by Form basis) by assigning the appropriate Employee Group Code to that Employee.

▪Checking the Audit Access Right on all Forms assigned using the Employee Groups Form is mandatory for compliance with the Third Edition UL® 1981 Standard requirement.