Part 2: Block the Role from the DeleteProcess SJobClass Object

This part involves preventing the role from being able to select the DeleteProcess job in the System > Operations > Job Queue or Job Schedule tabs.

  1. Click on the role’s Rules tab and the begin with the Rule Setup sub-tab.
  2. Select DENY and SJobClass from the access and objects drop-down lists, respectively, as shown in Figure 2-70:

Figure 2-70: Rule Setup sub-page

The SJobClass table lists available jobs in Millennium®.

  1. Enter a description so that other administrators can understand what the rule does.
  2. Click on the Record Rights tab:

Figure 2-71: Record Rights sub-page

  1. Enter the following in the text field:

jobclass <> ‘DeleteProcess’

This SQL prevents the role from being able to select the DeleteProcess job from the Job Queue or Job Schedule tabs.

If you have other jobs that you wish the role to not be able to run, your string could look something like the following:

jobclass = ‘Job1’ OR jobclass = ‘Job2’ OR jobclass = ‘Job3’

Do not attempt to use something like the following:

These statements will not deny anything. If you wish to deny two jobs, you can use the following:

jobclass <> ‘Job1’ AND jobclass <> ‘Job2’

When a user in that role attempts to create a new job, the system displays the Create New Job dialog. When the user clicks on the Job Class drop-down list and scrolls down, they will not see the DeleteProcess job, as shown in Figure 2-72

Figure 2-72: The Delete Process job class is not listed