Users

The Users section of Deacom contains a list of all users, both active and inactive. Each user record contains the user's login credentials, timeout minutes, general access information, and User Group assignment, as well as an "Edit Access" button to set a user's individual permissions. Users inherit the permissions of the User Group to which they are assigned. User-level access control can be used in situations where the specific user needs additional permissions besides those available for the User Group, or in situations where the specific user will be denied access to a few specific transactions or functions that are permitted at the User Group level. Security permissions set at the User level always override permissions set at the User Group level. When a new security permission is introduced in Deacom, it is automatically set to No for all Users (including admins and top tier users) by default.

To edit the security permissions for a single group, navigate to System > Maintenance > User Groups. To edit the security permissions of multiple groups at one time, navigate to System > Maintenance > User Group Master Security. Instructions on how to add or modify a User record and assign security permissions is available via Managing User Access and Security Settings.

Upon loading the initial Users form, a list of all active Users will be displayed and include information such as First and Last Name, Login Name, User Group, date of Last Login, and if the user is active and/or locked out. The "Display" button on this form may be used to display inactive or all Users.

System Navigation

System > Maintenance > Users

Edit User form

Opened via the "New" or "Modify" buttons on the Users form, the Edit User form is used to manage login credentials, User Group, Language, and application access.

Button/Field/Flag

Description

Edit Access

Opens the Edit User Access form, which is used to set security permissions for the forms, fields, and buttons throughout the system.

  • Individual Users inherit the permissions of the User Group to which they are assigned, with permissions set on the individual User level overriding those set on the User Group level.

Edit Doc Access

Opens the Edit Doc Access form, which is used to set individual user access to Document Categories.

  • Access to Document Categories can also be set at the User Group level via Document Category Security.

Edit Grid Access

Opens the Edit Grid Access form, which is used to set permissions for Grid Layouts/reports in the system. The form displays a list of all Grid Layouts together with columns indicating the user's User Group access and the individual user's access to the respective Grid Layouts.

  • Users inherit the permissions of the User Group to which they are assigned. User-level access control can be used in situations where the specific user needs access to additional Grid Layouts besides those available for the User Group, or in situations where the specific user will be denied access to a few specific Grid Layouts that are permitted at the User Group level.
  • The title of the Grid Layout, which represents the name that appears to the user in the system, can be added to the Edit Grid Access form by adding the c2_caption field to the Edit Grid Access Grid Layout.

Restrictions

Opens the Edit User Restrictions form, which is used to limit Users' access to records and functions within Deacom.

Published Data

Opens a mover form listing all BI and Graphs configured as Published Data that allows the user to assign reports to the selected User.

  • Records moved to the Destination section will appear in the BI section of the main application.

Copy Favorites

Allows the user to copy the Favorites, which appear in the left-hand navigation pane of the main application, configured for a different User.

First Name

Defines the user's first name.

Last Name

Defines the user's last name.

Login Name

Defines the username that will be used to log in to the system, e.g. "asmith".

  • Deacom will not ask for credentials to be entered, and will launch automatically, if the Deacom Login Name matches the Windows user name. Note: this only works for Classic and not the .Net version
  • Deacom always uses the login name even with LDAP. If using a LDAP login name, the user must enter it in the Deacom login name (us_login)
  • In version 17.02.007 this field was expanded to 60 characters.

LDAP User

Defines the user's network username. Used in connection with the "LDAP Domain" field in System > Options . Authentication tab to allow users to login into Deacom applications (WMS, Cash Register etc.) using their Deacom username and password.

  • If the LDAP Domain is set up in System > Options > Authentication tab and the user has an LDAP user in their user record, Deacom authenticates using the Deacom username (us_login) with the user’s LDAP password. The LDAP User is only present to connect the Deacom record to the LDAP record, NOT to authenticate with that LDAP username.
  • If the user wants to use their LDAP user name in Deacom, they currently have to make sure that us_login = us_ldapuser.
  • This field is unavailable if the "Access Deacom Restart" field is checked.

Password

Defines the user's password.

  • A best practice when setting up a new user is to enter a temporary password and check the "User Must Change Password At Next Login" flag.

Confirm

Confirms the password.

PIN Code

Defines the user's pin code used to login to the POS application.

User Group

Search field used to assign the User to a User Group.

Language

Search field used to assign the User a Language, if different than the default.

Scaling Size

Dropdown menu where users can have the system scale the size of fonts in the Deacom application based on the current monitors screen:

  • Width
  • Height
  • Maximum

The default setting is "Width" in which case the system scales the fonts size based on the users screen width resolution setting. The option to change the scaling is helpful when users need to better adjust the screen in order to improve font size/rendering for Deacom top menu options and pre-filters more clearly, including monitors with 4x3 aspect ration. Example - If your current browser dimension/screen resolution is 1920 x 1280, and this field is set to "Height", the application will use this (1280, or 12.8) in order to perform the scaling calculations. If you choose to set this field to "Maximum", the system will perform both height and width calculations using the highest values returned.

Email

Defines the email address for the user.

Email User

Defines the username for the selected user.

Email Password

Defines the encrypted password for the user.

  • This field is not required (as of version 17.01.041) when using OAuth2 authentication.

Email Signature

Option to specify an email signature on outgoing emails.

Outlook Contacts

Links the User profile to the user's Outlook Contacts.

  • Example input: C:\Users\<<user>>\AppData\Local\Microsoft\Outlook\<<emailaddress>>.ost

Outlook Calendar

Links the User profile to the user's Outlook Calendar.

  • Example input: C:\Users\<<user>>\AppData\Local\Microsoft\Outlook\<<emailaddress>>.ost

WMS Printer (requires WMS license)

Pick list used to specify the default printer for this user when logged into the WMS application. The "None" option may be used to allow users to move to different locations in a warehouse or plant and select different printers on the scanner without being restricted to the printer set on their user record in the system.

WMS Record Button (requires WMS license)

Defines the keycode on the scanner that will be used to initiate voice input/recognition for this specific user. Options are: Custom Keycode, KEYCODE_BUTTON_L1, KEYCODE_BUTTON_L2, KEYCODE_BUTTON_R1, KEYCODE_BUTTON_R2, KEYCODE_PROG_YELLOW, and None.

  • When selecting the "Customer Keycode" option, use the WMS Record Key field below to define the keycode.
  • This same field exists in Inventory Options. The WMS application will evaluate the user setting first, then the settings in Inventory Options if the user setting is blank to determine the default value on the scanner. Note that if the setting for this field on the scanner is changed, it will save back to this field on the User record.
  • Supports the use of voice commands for menu navigation and button selection on scanners.

WMS Record Key (requires WMS license)

Defines the user defined keycode to initiate voice input/recognition on the scanner.

  • Only available when selecting the "Custom Keycode" option in the WMS Record Button field above.
  • This same field exists in Inventory Options. The WMS application will evaluate the user setting first, then the settings in Inventory Options if the user setting is blank to determine the default value on the scanner. Note that if the setting for this field on the scanner is changed, it will save back to this field on the User record.
  • Supports the use of voice commands for menu navigation and button selection on scanners.

WMS Show Record (requires WMS license)

Option to set an on screen recording button in the WMS application. Options are Hide, None, and Show.

  • The recording button initially displays in the top right corner but may be moved.
  • Supports the ability to select buttons and navigate on the scanner when speaking a menu name or number.
  • This same field exists in Inventory Options. The WMS application will evaluate the user setting first, then the settings in Inventory Options if the user setting is blank to determine the default value on the scanner. Note that if the setting for this field on the scanner is changed, it will save back to this field on the User record.
  • Supports the use of voice commands for menu navigation, button selection, and button commands on scanners.
    • Voice input is available for the following button commands in Android WMS: 'Undo', 'Save', 'Exit', 'Continue', 'Next', 'Previous', 'Ok', 'Yes', 'No', 'Refresh', 'Print', 'Lines', 'Stage', 'Apply', 'Lots', 'Find', 'Details', 'Issue', 'All, 'Finish', 'Reserve', 'View', 'Quarantine', 'End Job', 'Back'

Password Date

Displays the date the last time the user changed their password.

Timeout Minutes

Defines the number of minutes the user can be inactive on a form in the system, including the WMS system, before they are logged out and forced to log back in.

  • When a user is timed out, they will receive a prompt indicating this and will be taken back to the login form.

Last Login

Displays the date of the user's last successful login attempt.

Active

If checked, this record is active. Only active records may be used in the system.

Access Main Application

If checked, the user may access the main Deacom application.

Access WMS (requires WMS license)

If checked, the user may access the Warehouse Management System (WMS).

Access Tracker

If checked, the user may access the Tracker, used to enter support tickets and monitor issues.

User Must Change Password At Next Login

If checked, the user must change their password the next time they login to Deacom.

Locked Out Due To Invalid Login Attempts Or Inactivity

If checked, indicates the user is currently inactive.

  • The system has a hardcoded number of 5 attempts allowed before this flag is set on the user record.

Monitor Email Correspondence

If checked, emails between this user and Contact People with the "Monitor Email" set to an option other than "None" will be tracked and stored as Contact Notes on the Contact record.

  • Users with this functionality should archive old e-mails to lessen the load on the server.
  • If this field is checked, values must be entered in the "Email User" and "Email Password" fields via the "Email Settings" option available when clicking the 'Person' icon on the main menu.

Limit Access To Single Application

If checked, the User will only be permitted to access one Deacom application (Cash Register, WMS, Mobile, DSD, Tracker, AutoFinisher, and Main App) at a time.

  • If a user attempts to log in to an app while they are already logged into a different platform, they will be prompted with "You are already logged into <<Application Name>> and are only allowed to be logged into one application at a time. Do you want to continue with this login and terminate the other session?"

Retain Printer Selection After Logout

If checked, and a new printer is selected via File > Settings, the system saves the user's printer selection in a cookie and reloads it on their next login as long as they are using the same browser.

  • Useful so that users will not have to continually reset their printer assignments each time they log in/out of Deacom.
  • Specifically, when a user logs in, the system will first wait for Deacom Local and Deacom Cloud Local printers to sync. After they sync, the system checks the cookie to see if it is filled in and matches a printer currently in the printer list. If so, the system changes the selected printer for the session. If no match is found, the system will stick with the default printer.

Device Approval Required

If checked, the user will require device approval authentication prior to logging into Deacom.

  • The default for this field is provided by the "Device Approval Required" field on the Authentication tab in System > Options.

Email Authentication

If checked, the user will require email authentication prior to logging into Deacom.

  • The default for this field is provided by the "Email Authentication" field on the Authentication tab in System > Options.

Security Question Authentication

If checked, the user will require security question authentication prior to logging into Deacom.

  • The default for this field is provided by the "Security Question Authentication" field on the Authentication tab in System > Options.

Use Outlook Desktop For Email

If checked, when Deacom Local is running (Windows only) emails are opened using the Outlook desktop application rather than within Deacom.

  • If Deacom Local is not running, the email will open within Deacom, regardless of whether this flag is checked.

Use LDAP Password For Email

If checked, the system will use the LDAP Password on this form when emailing from Deacom.

Access Deacom Restart

If checked, this user will have access to restart the Deacom Web Services.

  • This option is mutually exclusive with both SSO Only login and LDAP users. If a Single-Sign On Methods is used in System > Options > Authentication tab, or if an LDAP username is entered, the Access Deacom Restart checkbox is grayed out and vice versa.
  • This checkbox works in connection with the RestartDeacom endpoint. Added in version 17.03.004.0000
  • To restart the web service:
    • In the browser, at the end of the URL, add /restartdeacom. This will redirect to /MainApp/RestartDeacom.
    • A new login box (with the warning that it will restart Deacom) will appear. At this point the user will enter their Deacom credentials.
    • A loading screen will appear, followed by File Explorer popup of results from a Performance Diagnostic Utility dump, followed by a popup of a command window. Now the browser page will display a countdown from 60 to 0.
    • Once the command window disappears, the user will be returned to the main Deacom page. (You do not need to wait for the countdown to finish.)
    • The service should now be running again.

Notes: The restart option automatically runs a Performance Diagnostic Utility. The contents of Performance Diagnostic Utility dump (on screen) should look like those of a normal run of the utility when Export All is selected (correct number and similar size of files)

Edit Doc Access form

Opened via the "Edit Doc Access" button on the Edit User form, the Edit Doc Access form is laid out the same and contains the same buttons as the Edit User Access form, but instead of listing security permissions, it lists Document Categories. Access to Document Categories can also be set at the User Group level via Document Category Security.