SlideShare a Scribd company logo
1 of 34
Download to read offline
Cheri Polenske
Application Development Coordinator Central
Administration for
University of Nebraska and Nebraska State Colleges
 20+ years supporting Student Information Systems, 6
years supporting PeopleSoft




Denise Goin

PeopleSoft Security Central Administration for
University of Nebraska and Nebraska State Colleges
 17+ years of experience with the PeopleSoft software in
Higher Ed, City Government, K-12 and Public/Private
Commercial sector.

Chadron
Wayne

CSC

WSC

UNOOmaha




NeSIS consists of 4
Universities, 1 Technical
College and 3 State
Colleges
2 separate environments









Universities
State Colleges

Campus Solutions
Enterprise Portal (with 7
unique portals in the 2
environments)
Single Shared EPM

UNCA
Lincoln

Kearney UNK
NCTA
Curtis

UNMC

UNL

PSC Peru


Our Security Team




Our Technical Application
Support Team





2.5 Central Security Staff and each
campus has their own Security
Coordinator

6.5 Central Application Staff with
additional campus developers
2 student interns

Our PS Admin Team


4 Central Administrators


Applying Application Bundles, Security
Patches and PeopleTools Upgrades are
always challenging, University of
Nebraska has established a method of
analyzing and retrofitting mods (gasp)
for objects and security that works well
for us, and at the same time creating a
“minimum testing” guide.


Security Analysis



Application Development Analysis


Create the Security Project (DEMO)
 Get all Project names that were applied for this
maintenance period
 Combine them into 1 project, or create a copy
of each one for “security use”
 Always create your OWN projects, do not

compare the delivered projects




Analyze the Compare Reports
 Permission Lists
 Menus
 Components and Pages
 CREFS
Create “Deleted” project in DEV


Starting with the Permission List Compare Report





Create a bundle specific permission list (CS_NBA_BUNDLE28)





Look for new items (Source) and removed items (Target)
I use Highlighters and make notes!
Make a display only version of the bundle permission list
(CS_NBA_BUNDLE28_DISP)
Add the new permission list to the ALL Pages (custom) role
CS_NBA_ALLPAGES and the display only one to the all pages
display only role

Once I am done with the Permission list, I take notes and look at
component changes, cref changes just to double and triple
check!


When we do a bundle we must copy all impacted folders from
the Employee portal to the Schools specific portal
 We must insert all of the new crefs into a project to copy
to the enterprise portal from each of our schools portals
 We also must create a “delete” project for any crefs that
are being deleted from the Employee portal so that we
can remove them from the schools portals
COMPARE REPORTS
DO NOT ALWAYS
MATCH THE REAL
COMPONENT
NAME!! How do I
determine which is
correct? By side by
side analysis of
permission lists and
looking at the
menu item in app
designer.


Run queries in development looking for permission lists with
that component or a similar component
FA- %ISIR%, %INAS%
 We are pretty much down to a couple of permission lists, one
update and one display only for each of these functional areas
and we simply add the next years to the same permission list with
the current years, same thing with history pages




Some of the “components” do not match between compare
reports and the PSAUTHITEM table
Use PeopleTools > Portal > Structure and Content
 Security tab lists all permission lists with any access to the
component







In development most people have clones of PS (minus a
couple of roles)
In Test most “power testers” have our custom “All Pages” role
so they can test the new functionality as soon as the bundle
moves into test. Each Bundle permission list gets added to
the “all Pages” role.
In QA we have retained close to Production security, this is
where they should be testing that they can get to the pages
that they need with their campus security. We tell them if
they don’t see it in QA they will not see it in PRD!




Our PS Admins also run compare
reports from our DMO/vanilla
instances to our DEV instances.
The App Dev team analyzes those
compare reports for any tools objects
that may overwrite/impact local
customizations/modifications.




With app designer, in the source (DMO)
instance, open each maintenance project,
go to the Upgrade tab and click on each
object type.
Review the list at the right looking for any
object with ‘*Changed’ in the Target column.
This indicates a local modification.


Open each *Changed object with app
designer in the target instance to
review the object properties/code.
• Take note of the modification number and developer
from the object properties. Also take note of the object
detail changes from the compare report. This
spreadsheet will serve as the master list of mods to be
reapplied, retrofitted or decommissioned as well as
thoroughly tested.




For file objects, we look in the technical
documentation released from Oracle. (CS
BNDL 28 – RESOLUTION_888834)
For any delivered file object that we have
modified, we have created a custom folder
on our file system for the various categories
of file objects.


Add the affected file objects to the
bundle analysis spreadsheet.
Prepare a spreadsheet with a list of all custom
component interfaces from your target instance.
Lesson learned (and learned again) is to double
check all custom CIs.




Once the bundle has been
successfully applied to the DEV
instances, the developers begin
analyzing each object entered on the
spreadsheet to determine if each
modification is still needed.
If needed, the developers reapply or
retrofit the code in the DEV instances.


Remember to modify the code as well
as the properties of each object.
LET THE
TESTING
BEGIN!!!




Denise Goin

PeopleSoft Security Specialist Central Administration for
University of Nebraska and Nebraska State Colleges






E-mail: dgoin@nebraska.edu
Cheri Polenske
Application Development Coordinator Central Administration for
University of Nebraska and Nebraska State Colleges



E-mail: cpolenske@nebraska.edu

More Related Content

Similar to Analyzing PeopleSoft Bundle Impacts and Mod Retrofitting for the University of Nebraska

Oracle Concurrent Program Setup document
Oracle Concurrent Program Setup  documentOracle Concurrent Program Setup  document
Oracle Concurrent Program Setup documentvenkatesh gurusamy
 
HelloChapter6fgfg-Artifacts__of_theProcess.ppt
HelloChapter6fgfg-Artifacts__of_theProcess.pptHelloChapter6fgfg-Artifacts__of_theProcess.ppt
HelloChapter6fgfg-Artifacts__of_theProcess.ppt19526YuvaKumarIrigi
 
Software design.edited (1)
Software design.edited (1)Software design.edited (1)
Software design.edited (1)FarjanaAhmed3
 
Testing Presentation
Testing PresentationTesting Presentation
Testing Presentationsureshpkumar
 
Different Methodologies For Testing Web Application Testing
Different Methodologies For Testing Web Application TestingDifferent Methodologies For Testing Web Application Testing
Different Methodologies For Testing Web Application TestingRachel Davis
 
Sanjeevi's SDLC Guest Lecture in Anna University campus at AU-PERS Centre (Ye...
Sanjeevi's SDLC Guest Lecture in Anna University campus at AU-PERS Centre (Ye...Sanjeevi's SDLC Guest Lecture in Anna University campus at AU-PERS Centre (Ye...
Sanjeevi's SDLC Guest Lecture in Anna University campus at AU-PERS Centre (Ye...Sanjeevi Prasad
 
Manual testing visonia
Manual testing   visoniaManual testing   visonia
Manual testing visoniaVisoniaTechlab
 
term paper for cbd models
term paper for cbd modelsterm paper for cbd models
term paper for cbd modelsSukhdeep Singh
 
Automating and Validating Semantic Annotations.pdf
Automating and Validating Semantic Annotations.pdfAutomating and Validating Semantic Annotations.pdf
Automating and Validating Semantic Annotations.pdfKathryn Patel
 
Test Strategy Utilising Mc Useful Tools
Test Strategy Utilising Mc Useful ToolsTest Strategy Utilising Mc Useful Tools
Test Strategy Utilising Mc Useful Toolsmcthedog
 
ASE Notes - Kuntucky.docx
ASE Notes - Kuntucky.docxASE Notes - Kuntucky.docx
ASE Notes - Kuntucky.docxSanLizasAiren1
 
Pos 409 pos409 pos 409 forecasting and strategic planning -uopstudy.com
Pos 409 pos409 pos 409 forecasting and strategic planning -uopstudy.comPos 409 pos409 pos 409 forecasting and strategic planning -uopstudy.com
Pos 409 pos409 pos 409 forecasting and strategic planning -uopstudy.comULLPTT
 
Iterative Waterfall model
Iterative Waterfall modelIterative Waterfall model
Iterative Waterfall modelAnmol Purohit
 
Window Desktop Application Testing
Window Desktop Application TestingWindow Desktop Application Testing
Window Desktop Application TestingTrupti Jethva
 

Similar to Analyzing PeopleSoft Bundle Impacts and Mod Retrofitting for the University of Nebraska (20)

Oracle Concurrent Program Setup document
Oracle Concurrent Program Setup  documentOracle Concurrent Program Setup  document
Oracle Concurrent Program Setup document
 
HelloChapter6fgfg-Artifacts__of_theProcess.ppt
HelloChapter6fgfg-Artifacts__of_theProcess.pptHelloChapter6fgfg-Artifacts__of_theProcess.ppt
HelloChapter6fgfg-Artifacts__of_theProcess.ppt
 
Session3
Session3Session3
Session3
 
Software design.edited (1)
Software design.edited (1)Software design.edited (1)
Software design.edited (1)
 
Testing Presentation
Testing PresentationTesting Presentation
Testing Presentation
 
Different Methodologies For Testing Web Application Testing
Different Methodologies For Testing Web Application TestingDifferent Methodologies For Testing Web Application Testing
Different Methodologies For Testing Web Application Testing
 
Sanjeevi's SDLC Guest Lecture in Anna University campus at AU-PERS Centre (Ye...
Sanjeevi's SDLC Guest Lecture in Anna University campus at AU-PERS Centre (Ye...Sanjeevi's SDLC Guest Lecture in Anna University campus at AU-PERS Centre (Ye...
Sanjeevi's SDLC Guest Lecture in Anna University campus at AU-PERS Centre (Ye...
 
Sdlc
SdlcSdlc
Sdlc
 
Sdlc
SdlcSdlc
Sdlc
 
Manual testing visonia
Manual testing   visoniaManual testing   visonia
Manual testing visonia
 
term paper for cbd models
term paper for cbd modelsterm paper for cbd models
term paper for cbd models
 
Automating and Validating Semantic Annotations.pdf
Automating and Validating Semantic Annotations.pdfAutomating and Validating Semantic Annotations.pdf
Automating and Validating Semantic Annotations.pdf
 
Test Strategy Utilising Mc Useful Tools
Test Strategy Utilising Mc Useful ToolsTest Strategy Utilising Mc Useful Tools
Test Strategy Utilising Mc Useful Tools
 
ITFT - Software
ITFT -  SoftwareITFT -  Software
ITFT - Software
 
Jagrat_Mankad
Jagrat_MankadJagrat_Mankad
Jagrat_Mankad
 
ASE Notes - Kuntucky.docx
ASE Notes - Kuntucky.docxASE Notes - Kuntucky.docx
ASE Notes - Kuntucky.docx
 
Pos 409 pos409 pos 409 forecasting and strategic planning -uopstudy.com
Pos 409 pos409 pos 409 forecasting and strategic planning -uopstudy.comPos 409 pos409 pos 409 forecasting and strategic planning -uopstudy.com
Pos 409 pos409 pos 409 forecasting and strategic planning -uopstudy.com
 
Iterative Waterfall model
Iterative Waterfall modelIterative Waterfall model
Iterative Waterfall model
 
ibuyer_Manual
ibuyer_Manualibuyer_Manual
ibuyer_Manual
 
Window Desktop Application Testing
Window Desktop Application TestingWindow Desktop Application Testing
Window Desktop Application Testing
 

More from tecrecruiter

Omaha rug customer 2 cloud customer facing hcm ppt aug 2014
Omaha rug customer 2 cloud customer facing hcm ppt aug 2014Omaha rug customer 2 cloud customer facing hcm ppt aug 2014
Omaha rug customer 2 cloud customer facing hcm ppt aug 2014tecrecruiter
 
Upgrade time savers rug 201312
Upgrade time savers   rug 201312Upgrade time savers   rug 201312
Upgrade time savers rug 201312tecrecruiter
 
Rug Presentation Conagra
Rug Presentation ConagraRug Presentation Conagra
Rug Presentation Conagratecrecruiter
 
Omaha Rug2012 People Soft Fms 9 1 Overview Apr2012
Omaha Rug2012 People Soft Fms 9 1 Overview Apr2012Omaha Rug2012 People Soft Fms 9 1 Overview Apr2012
Omaha Rug2012 People Soft Fms 9 1 Overview Apr2012tecrecruiter
 

More from tecrecruiter (8)

Omaha rug mobile
Omaha rug mobileOmaha rug mobile
Omaha rug mobile
 
Omaha rug customer 2 cloud customer facing hcm ppt aug 2014
Omaha rug customer 2 cloud customer facing hcm ppt aug 2014Omaha rug customer 2 cloud customer facing hcm ppt aug 2014
Omaha rug customer 2 cloud customer facing hcm ppt aug 2014
 
Upgrade time savers rug 201312
Upgrade time savers   rug 201312Upgrade time savers   rug 201312
Upgrade time savers rug 201312
 
Cio golf outing
Cio golf outingCio golf outing
Cio golf outing
 
Qtr 3 2012 Ppt
Qtr 3 2012 PptQtr 3 2012 Ppt
Qtr 3 2012 Ppt
 
Rug Presentation Conagra
Rug Presentation ConagraRug Presentation Conagra
Rug Presentation Conagra
 
Omaha Rug2012 People Soft Fms 9 1 Overview Apr2012
Omaha Rug2012 People Soft Fms 9 1 Overview Apr2012Omaha Rug2012 People Soft Fms 9 1 Overview Apr2012
Omaha Rug2012 People Soft Fms 9 1 Overview Apr2012
 
Oppd Rug 2012
Oppd Rug 2012Oppd Rug 2012
Oppd Rug 2012
 

Recently uploaded

Slack Application Development 101 Slides
Slack Application Development 101 SlidesSlack Application Development 101 Slides
Slack Application Development 101 Slidespraypatel2
 
AI as an Interface for Commercial Buildings
AI as an Interface for Commercial BuildingsAI as an Interface for Commercial Buildings
AI as an Interface for Commercial BuildingsMemoori
 
Maximizing Board Effectiveness 2024 Webinar.pptx
Maximizing Board Effectiveness 2024 Webinar.pptxMaximizing Board Effectiveness 2024 Webinar.pptx
Maximizing Board Effectiveness 2024 Webinar.pptxOnBoard
 
Transcript: #StandardsGoals for 2024: What’s new for BISAC - Tech Forum 2024
Transcript: #StandardsGoals for 2024: What’s new for BISAC - Tech Forum 2024Transcript: #StandardsGoals for 2024: What’s new for BISAC - Tech Forum 2024
Transcript: #StandardsGoals for 2024: What’s new for BISAC - Tech Forum 2024BookNet Canada
 
WhatsApp 9892124323 ✓Call Girls In Kalyan ( Mumbai ) secure service
WhatsApp 9892124323 ✓Call Girls In Kalyan ( Mumbai ) secure serviceWhatsApp 9892124323 ✓Call Girls In Kalyan ( Mumbai ) secure service
WhatsApp 9892124323 ✓Call Girls In Kalyan ( Mumbai ) secure servicePooja Nehwal
 
GenCyber Cyber Security Day Presentation
GenCyber Cyber Security Day PresentationGenCyber Cyber Security Day Presentation
GenCyber Cyber Security Day PresentationMichael W. Hawkins
 
Automating Business Process via MuleSoft Composer | Bangalore MuleSoft Meetup...
Automating Business Process via MuleSoft Composer | Bangalore MuleSoft Meetup...Automating Business Process via MuleSoft Composer | Bangalore MuleSoft Meetup...
Automating Business Process via MuleSoft Composer | Bangalore MuleSoft Meetup...shyamraj55
 
Kotlin Multiplatform & Compose Multiplatform - Starter kit for pragmatics
Kotlin Multiplatform & Compose Multiplatform - Starter kit for pragmaticsKotlin Multiplatform & Compose Multiplatform - Starter kit for pragmatics
Kotlin Multiplatform & Compose Multiplatform - Starter kit for pragmaticscarlostorres15106
 
IAC 2024 - IA Fast Track to Search Focused AI Solutions
IAC 2024 - IA Fast Track to Search Focused AI SolutionsIAC 2024 - IA Fast Track to Search Focused AI Solutions
IAC 2024 - IA Fast Track to Search Focused AI SolutionsEnterprise Knowledge
 
Neo4j - How KGs are shaping the future of Generative AI at AWS Summit London ...
Neo4j - How KGs are shaping the future of Generative AI at AWS Summit London ...Neo4j - How KGs are shaping the future of Generative AI at AWS Summit London ...
Neo4j - How KGs are shaping the future of Generative AI at AWS Summit London ...Neo4j
 
CloudStudio User manual (basic edition):
CloudStudio User manual (basic edition):CloudStudio User manual (basic edition):
CloudStudio User manual (basic edition):comworks
 
Snow Chain-Integrated Tire for a Safe Drive on Winter Roads
Snow Chain-Integrated Tire for a Safe Drive on Winter RoadsSnow Chain-Integrated Tire for a Safe Drive on Winter Roads
Snow Chain-Integrated Tire for a Safe Drive on Winter RoadsHyundai Motor Group
 
Understanding the Laravel MVC Architecture
Understanding the Laravel MVC ArchitectureUnderstanding the Laravel MVC Architecture
Understanding the Laravel MVC ArchitecturePixlogix Infotech
 
SIEMENS: RAPUNZEL – A Tale About Knowledge Graph
SIEMENS: RAPUNZEL – A Tale About Knowledge GraphSIEMENS: RAPUNZEL – A Tale About Knowledge Graph
SIEMENS: RAPUNZEL – A Tale About Knowledge GraphNeo4j
 
08448380779 Call Girls In Friends Colony Women Seeking Men
08448380779 Call Girls In Friends Colony Women Seeking Men08448380779 Call Girls In Friends Colony Women Seeking Men
08448380779 Call Girls In Friends Colony Women Seeking MenDelhi Call girls
 
Artificial intelligence in the post-deep learning era
Artificial intelligence in the post-deep learning eraArtificial intelligence in the post-deep learning era
Artificial intelligence in the post-deep learning eraDeakin University
 
Integration and Automation in Practice: CI/CD in Mule Integration and Automat...
Integration and Automation in Practice: CI/CD in Mule Integration and Automat...Integration and Automation in Practice: CI/CD in Mule Integration and Automat...
Integration and Automation in Practice: CI/CD in Mule Integration and Automat...Patryk Bandurski
 
Swan(sea) Song – personal research during my six years at Swansea ... and bey...
Swan(sea) Song – personal research during my six years at Swansea ... and bey...Swan(sea) Song – personal research during my six years at Swansea ... and bey...
Swan(sea) Song – personal research during my six years at Swansea ... and bey...Alan Dix
 
Advanced Test Driven-Development @ php[tek] 2024
Advanced Test Driven-Development @ php[tek] 2024Advanced Test Driven-Development @ php[tek] 2024
Advanced Test Driven-Development @ php[tek] 2024Scott Keck-Warren
 

Recently uploaded (20)

Slack Application Development 101 Slides
Slack Application Development 101 SlidesSlack Application Development 101 Slides
Slack Application Development 101 Slides
 
AI as an Interface for Commercial Buildings
AI as an Interface for Commercial BuildingsAI as an Interface for Commercial Buildings
AI as an Interface for Commercial Buildings
 
Maximizing Board Effectiveness 2024 Webinar.pptx
Maximizing Board Effectiveness 2024 Webinar.pptxMaximizing Board Effectiveness 2024 Webinar.pptx
Maximizing Board Effectiveness 2024 Webinar.pptx
 
Transcript: #StandardsGoals for 2024: What’s new for BISAC - Tech Forum 2024
Transcript: #StandardsGoals for 2024: What’s new for BISAC - Tech Forum 2024Transcript: #StandardsGoals for 2024: What’s new for BISAC - Tech Forum 2024
Transcript: #StandardsGoals for 2024: What’s new for BISAC - Tech Forum 2024
 
Vulnerability_Management_GRC_by Sohang Sengupta.pptx
Vulnerability_Management_GRC_by Sohang Sengupta.pptxVulnerability_Management_GRC_by Sohang Sengupta.pptx
Vulnerability_Management_GRC_by Sohang Sengupta.pptx
 
WhatsApp 9892124323 ✓Call Girls In Kalyan ( Mumbai ) secure service
WhatsApp 9892124323 ✓Call Girls In Kalyan ( Mumbai ) secure serviceWhatsApp 9892124323 ✓Call Girls In Kalyan ( Mumbai ) secure service
WhatsApp 9892124323 ✓Call Girls In Kalyan ( Mumbai ) secure service
 
GenCyber Cyber Security Day Presentation
GenCyber Cyber Security Day PresentationGenCyber Cyber Security Day Presentation
GenCyber Cyber Security Day Presentation
 
Automating Business Process via MuleSoft Composer | Bangalore MuleSoft Meetup...
Automating Business Process via MuleSoft Composer | Bangalore MuleSoft Meetup...Automating Business Process via MuleSoft Composer | Bangalore MuleSoft Meetup...
Automating Business Process via MuleSoft Composer | Bangalore MuleSoft Meetup...
 
Kotlin Multiplatform & Compose Multiplatform - Starter kit for pragmatics
Kotlin Multiplatform & Compose Multiplatform - Starter kit for pragmaticsKotlin Multiplatform & Compose Multiplatform - Starter kit for pragmatics
Kotlin Multiplatform & Compose Multiplatform - Starter kit for pragmatics
 
IAC 2024 - IA Fast Track to Search Focused AI Solutions
IAC 2024 - IA Fast Track to Search Focused AI SolutionsIAC 2024 - IA Fast Track to Search Focused AI Solutions
IAC 2024 - IA Fast Track to Search Focused AI Solutions
 
Neo4j - How KGs are shaping the future of Generative AI at AWS Summit London ...
Neo4j - How KGs are shaping the future of Generative AI at AWS Summit London ...Neo4j - How KGs are shaping the future of Generative AI at AWS Summit London ...
Neo4j - How KGs are shaping the future of Generative AI at AWS Summit London ...
 
CloudStudio User manual (basic edition):
CloudStudio User manual (basic edition):CloudStudio User manual (basic edition):
CloudStudio User manual (basic edition):
 
Snow Chain-Integrated Tire for a Safe Drive on Winter Roads
Snow Chain-Integrated Tire for a Safe Drive on Winter RoadsSnow Chain-Integrated Tire for a Safe Drive on Winter Roads
Snow Chain-Integrated Tire for a Safe Drive on Winter Roads
 
Understanding the Laravel MVC Architecture
Understanding the Laravel MVC ArchitectureUnderstanding the Laravel MVC Architecture
Understanding the Laravel MVC Architecture
 
SIEMENS: RAPUNZEL – A Tale About Knowledge Graph
SIEMENS: RAPUNZEL – A Tale About Knowledge GraphSIEMENS: RAPUNZEL – A Tale About Knowledge Graph
SIEMENS: RAPUNZEL – A Tale About Knowledge Graph
 
08448380779 Call Girls In Friends Colony Women Seeking Men
08448380779 Call Girls In Friends Colony Women Seeking Men08448380779 Call Girls In Friends Colony Women Seeking Men
08448380779 Call Girls In Friends Colony Women Seeking Men
 
Artificial intelligence in the post-deep learning era
Artificial intelligence in the post-deep learning eraArtificial intelligence in the post-deep learning era
Artificial intelligence in the post-deep learning era
 
Integration and Automation in Practice: CI/CD in Mule Integration and Automat...
Integration and Automation in Practice: CI/CD in Mule Integration and Automat...Integration and Automation in Practice: CI/CD in Mule Integration and Automat...
Integration and Automation in Practice: CI/CD in Mule Integration and Automat...
 
Swan(sea) Song – personal research during my six years at Swansea ... and bey...
Swan(sea) Song – personal research during my six years at Swansea ... and bey...Swan(sea) Song – personal research during my six years at Swansea ... and bey...
Swan(sea) Song – personal research during my six years at Swansea ... and bey...
 
Advanced Test Driven-Development @ php[tek] 2024
Advanced Test Driven-Development @ php[tek] 2024Advanced Test Driven-Development @ php[tek] 2024
Advanced Test Driven-Development @ php[tek] 2024
 

Analyzing PeopleSoft Bundle Impacts and Mod Retrofitting for the University of Nebraska

  • 1.
  • 2. Cheri Polenske Application Development Coordinator Central Administration for University of Nebraska and Nebraska State Colleges  20+ years supporting Student Information Systems, 6 years supporting PeopleSoft   Denise Goin PeopleSoft Security Central Administration for University of Nebraska and Nebraska State Colleges  17+ years of experience with the PeopleSoft software in Higher Ed, City Government, K-12 and Public/Private Commercial sector. 
  • 3. Chadron Wayne CSC WSC UNOOmaha   NeSIS consists of 4 Universities, 1 Technical College and 3 State Colleges 2 separate environments      Universities State Colleges Campus Solutions Enterprise Portal (with 7 unique portals in the 2 environments) Single Shared EPM UNCA Lincoln Kearney UNK NCTA Curtis UNMC UNL PSC Peru  Our Security Team   Our Technical Application Support Team    2.5 Central Security Staff and each campus has their own Security Coordinator 6.5 Central Application Staff with additional campus developers 2 student interns Our PS Admin Team  4 Central Administrators
  • 4.  Applying Application Bundles, Security Patches and PeopleTools Upgrades are always challenging, University of Nebraska has established a method of analyzing and retrofitting mods (gasp) for objects and security that works well for us, and at the same time creating a “minimum testing” guide.
  • 6.
  • 7.
  • 8.  Create the Security Project (DEMO)  Get all Project names that were applied for this maintenance period  Combine them into 1 project, or create a copy of each one for “security use”  Always create your OWN projects, do not compare the delivered projects   Analyze the Compare Reports  Permission Lists  Menus  Components and Pages  CREFS Create “Deleted” project in DEV
  • 9.
  • 10.
  • 11.  Starting with the Permission List Compare Report    Create a bundle specific permission list (CS_NBA_BUNDLE28)    Look for new items (Source) and removed items (Target) I use Highlighters and make notes! Make a display only version of the bundle permission list (CS_NBA_BUNDLE28_DISP) Add the new permission list to the ALL Pages (custom) role CS_NBA_ALLPAGES and the display only one to the all pages display only role Once I am done with the Permission list, I take notes and look at component changes, cref changes just to double and triple check!
  • 12.  When we do a bundle we must copy all impacted folders from the Employee portal to the Schools specific portal  We must insert all of the new crefs into a project to copy to the enterprise portal from each of our schools portals  We also must create a “delete” project for any crefs that are being deleted from the Employee portal so that we can remove them from the schools portals
  • 13. COMPARE REPORTS DO NOT ALWAYS MATCH THE REAL COMPONENT NAME!! How do I determine which is correct? By side by side analysis of permission lists and looking at the menu item in app designer.
  • 14.
  • 15.
  • 16.
  • 17.
  • 18.
  • 19.
  • 20.
  • 21.  Run queries in development looking for permission lists with that component or a similar component FA- %ISIR%, %INAS%  We are pretty much down to a couple of permission lists, one update and one display only for each of these functional areas and we simply add the next years to the same permission list with the current years, same thing with history pages   Some of the “components” do not match between compare reports and the PSAUTHITEM table Use PeopleTools > Portal > Structure and Content  Security tab lists all permission lists with any access to the component 
  • 22.    In development most people have clones of PS (minus a couple of roles) In Test most “power testers” have our custom “All Pages” role so they can test the new functionality as soon as the bundle moves into test. Each Bundle permission list gets added to the “all Pages” role. In QA we have retained close to Production security, this is where they should be testing that they can get to the pages that they need with their campus security. We tell them if they don’t see it in QA they will not see it in PRD!
  • 23.
  • 24.   Our PS Admins also run compare reports from our DMO/vanilla instances to our DEV instances. The App Dev team analyzes those compare reports for any tools objects that may overwrite/impact local customizations/modifications.
  • 25.   With app designer, in the source (DMO) instance, open each maintenance project, go to the Upgrade tab and click on each object type. Review the list at the right looking for any object with ‘*Changed’ in the Target column. This indicates a local modification.
  • 26.  Open each *Changed object with app designer in the target instance to review the object properties/code.
  • 27. • Take note of the modification number and developer from the object properties. Also take note of the object detail changes from the compare report. This spreadsheet will serve as the master list of mods to be reapplied, retrofitted or decommissioned as well as thoroughly tested.
  • 28.   For file objects, we look in the technical documentation released from Oracle. (CS BNDL 28 – RESOLUTION_888834) For any delivered file object that we have modified, we have created a custom folder on our file system for the various categories of file objects.
  • 29.  Add the affected file objects to the bundle analysis spreadsheet.
  • 30. Prepare a spreadsheet with a list of all custom component interfaces from your target instance. Lesson learned (and learned again) is to double check all custom CIs.
  • 31.   Once the bundle has been successfully applied to the DEV instances, the developers begin analyzing each object entered on the spreadsheet to determine if each modification is still needed. If needed, the developers reapply or retrofit the code in the DEV instances.
  • 32.  Remember to modify the code as well as the properties of each object.
  • 34.   Denise Goin PeopleSoft Security Specialist Central Administration for University of Nebraska and Nebraska State Colleges    E-mail: dgoin@nebraska.edu Cheri Polenske Application Development Coordinator Central Administration for University of Nebraska and Nebraska State Colleges  E-mail: cpolenske@nebraska.edu