Difference between revisions of "Policy"

From TempusServa wiki
Jump to navigation Jump to search
old>Admin
m
 
(4 intermediate revisions by 2 users not shown)
Line 5: Line 5:
=== Server configuration ===
=== Server configuration ===
{|
{|
!policy name
!System name
!explantion
!Display name
!extra info
!Explantion
!Extra info
|-
|-
|'''applicationBasePath'''
|'''applicationBasePath'''
Application folder
|Application folder
|Location of WAR / deployed web application
|Location of WAR / deployed web application
|
|
Line 16: Line 17:


|'''applicationDisplayName'''
|'''applicationDisplayName'''
Application display name
|Application display name
|Name of application displayed to users
|Name of application displayed to users
|
|
Line 22: Line 23:


|'''applicationlPort'''
|'''applicationlPort'''
Server port for HTTP
|Server port for HTTP
|Port used running regular requests. Needs to match the setting in webcontainer definition (server.xm in Tomcat)l
|Port used running regular requests. Needs to match the setting in webcontainer definition (server.xm in Tomcat)l
|
|
Line 28: Line 29:


|'''applicationlPortSSL'''
|'''applicationlPortSSL'''
Server port for HTTPS
|Server port for HTTPS
|Port used running SSL encrypted requests. Needs to match the setting in webcontainer definition (server.xm in Tomcat)l
|Port used running SSL encrypted requests. Needs to match the setting in webcontainer definition (server.xm in Tomcat)l
|
|
Line 34: Line 35:


|'''applicationName'''
|'''applicationName'''
Application name
|Application name
|Name of application / folder - example http://myserver.com/APPLICATIONNAME/login
|Name of application / folder - example <nowiki>http://myserver.com/APPLICATIONNAME/login</nowiki>
|
|
|-
|-


|'''applicationServer'''
|'''applicationServer'''
Application server hostname or IP
|Application server hostname or IP
|Base refernce for the server. IP example: 89.56.12.14. Network name: localhost. Domain: bpms.acme.com
|Base refernce for the server. IP example: 89.56.12.14. Network name: localhost. Domain: bpms.acme.com
|
|
Line 46: Line 47:


|'''applicationURL'''
|'''applicationURL'''
Application machine / URL
|Application machine / URL
|Base URL of the server as seen by the end user. Overlaps with value in applicationServer
|Base URL of the server as seen by the end user. Overlaps with value in applicationServer
|
|
Line 52: Line 53:


|'''cacheActive'''
|'''cacheActive'''
Caching enabled (recommended)
|Caching enabled (recommended)
|Enable caching of system ressources. Alternative: Collect all ressources every time (very slow)
|Enable caching of system ressources. Alternative: Collect all ressources every time (very slow)
|
|
Line 58: Line 59:


|'''cacheBrowserExpireSeconds'''
|'''cacheBrowserExpireSeconds'''
Static content cache time (seconds)
|Static content cache time (seconds)
|Amount of time that images and scripts are cached i client browser.
|Amount of time that images and scripts are cached i client browser.
|
|
Line 64: Line 65:


|'''cacheMaxObjectSize'''
|'''cacheMaxObjectSize'''
Cache maximum size (bytes)
|Cache maximum size (bytes)
|Maximum amount of memory consumed by the cache. Set as high as possible.
|Maximum amount of memory consumed by the cache. Set as high as possible.
|
|
Line 70: Line 71:


|'''connectionPoolActive'''
|'''connectionPoolActive'''
Use connection pools (recommended)
|Use connection pools (recommended)
|Strongly recommended. Use webcontainer connection pools. Alternative: Application builds own connections (very slow)  
|Strongly recommended. Use webcontainer connection pools. Alternative: Application builds own connections (very slow)  
|
|
Line 76: Line 77:


|'''defaultCharEncoding'''
|'''defaultCharEncoding'''
Default Character Encoding
|Default Character Encoding
|Recommended: ISO-8859
|Recommended: ISO-8859
|
|
Line 82: Line 83:


|'''doExtraUrlDecoding'''
|'''doExtraUrlDecoding'''
Decode autocompletion / quicksearch
|Decode autocompletion / quicksearch
|Use if experiencing problems with autocompletion / quicksearch  
|Use if experiencing problems with autocompletion / quicksearch  
|
|
Line 88: Line 89:


|'''doRedirectAfterUpdate'''
|'''doRedirectAfterUpdate'''
Redirect user after updates
|Redirect user after updates
|Strongly recommended. Slight performance hit, but enables browser BACK button
|Strongly recommended. Slight performance hit, but enables browser BACK button
|
|
Line 94: Line 95:


|'''multiServerCoordination'''
|'''multiServerCoordination'''
Server cluster coordination
|Server cluster coordination
|Coordinate cache flushing, user list etc. through database communication (polling).
|Coordinate cache flushing, user list etc. through database communication (polling).
|
|
Line 100: Line 101:


|'''serverTypeAutodetect'''
|'''serverTypeAutodetect'''
Server type detection
|Server type detection
|Autodetect compliance type
|Autodetect compliance type
|
|
Line 106: Line 107:


|'''serverTypeJ2EE'''
|'''serverTypeJ2EE'''
Server type J2EE
|Server type J2EE
|Compliance type if autodetect is disabled
|Compliance type if autodetect is disabled
|
|
Line 112: Line 113:


|'''sessionCheckInterval'''
|'''sessionCheckInterval'''
Session cleanup interval (minutes)
|Session cleanup interval (minutes)
|Time between online list sweeping, removing user with no recent activity.
|Time between online list sweeping, removing user with no recent activity.
|
|
Line 118: Line 119:


|'''sessionLifetimeMaximum'''
|'''sessionLifetimeMaximum'''
Session lifetime (minutes)
|Session lifetime (minutes)
|Maximum time before last activity before users must log in again
|Maximum time before last activity before users must log in again
|
|
Line 124: Line 125:


|'''sessionLifetimeMinutes'''
|'''sessionLifetimeMinutes'''
Session lifetime minutes
|Session lifetime minutes
|Length of user sessions (changeable at runtime)
|Length of user sessions (changeable at runtime)
|
|
Line 130: Line 131:


|'''systemOptimizeMemory'''
|'''systemOptimizeMemory'''
Minimize HEAP size
|Minimize HEAP size
|Always recommended < 1Gb RAM. Tradeoff between RAM and CPU time
|Always recommended < 1Gb RAM. Tradeoff between RAM and CPU time
|
|
|-
|-
|}
|}


=== Interface behaviour ===
=== Interface behaviour ===
{|
{|
!policy name
!System name
!explantion
!Display name
!extra info
!Explantion
!Extra info
|-
|-
|'''allowAliasQueryParameters'''
|'''allowAliasQueryParameters'''
Allow Query alias parameters
|Allow Query alias parameters
|Allow alternate names for parameters used in LIST searches. Alternate names can be set programmtically.
|Allow alternate names for parameters used in LIST searches. Alternate names can be set programmtically.
|
|
Line 150: Line 151:


|'''allowFieldSelectionInLists'''
|'''allowFieldSelectionInLists'''
Allow field selection in lists
|Allow field selection in lists
|Allow user to select which fields are displayed in LIST views
|Allow user to select which fields are displayed in LIST views
|
|
Line 156: Line 157:


|'''allowListQuickFilter'''
|'''allowListQuickFilter'''
Allow for Quick filters i list views
|Allow for Quick filters i list views
|Enable serach in lists by writing part of the name (a search box will appear)
|Enable serach in lists by writing part of the name (a search box will appear)
|
|
Line 162: Line 163:


|'''allowListSubtableRendering'''
|'''allowListSubtableRendering'''
Data subtables in lists
|Data subtables in lists
|Subtables can negatively affect performance
|Subtables can negatively affect performance
|
|
Line 168: Line 169:


|'''allowSubtableLists'''
|'''allowSubtableLists'''
Allow subtables in items (recommended)
|Allow subtables in items (recommended)
|Allow related child records to be displayed in ITEM level views
|Allow related child records to be displayed in ITEM level views
|
|
Line 174: Line 175:


|'''concurrencyWarnings'''
|'''concurrencyWarnings'''
Warn on simultanous item editing
|Warn on simultanous item editing
|Users poll server for changes using AJAX in browser client (some performance impact). Note that only different users editing the same item will trigger a warning.
|Users poll server for changes using AJAX in browser client (some performance impact). Note that only different users editing the same item will trigger a warning.
|
|
Line 180: Line 181:


|'''defaultLanguageID'''
|'''defaultLanguageID'''
Default Language (ID)
|Default Language (ID)
|Language to use if nothing else is specified and autodetection is disabled. Test by adding &Language=[number] to URL
|Language to use if nothing else is specified and autodetection is disabled. Test by adding &Language=[number] to URL
|
|
Line 186: Line 187:


|'''defaultStyleID'''
|'''defaultStyleID'''
Default Style (ID)
|Default Style (ID)
|Style (buttons) to use if nothing else is specified. Test by adding &Style=[number] to URL
|Style (buttons) to use if nothing else is specified. Test by adding &Style=[number] to URL
|
|
Line 192: Line 193:


|'''defaultStylesheetID'''
|'''defaultStylesheetID'''
Default Stylesheet (ID)
|Default Stylesheet (ID)
|Stylesheet to use if nothing else is specified. Test by adding &Stylesheet=[number] to URL
|Stylesheet to use if nothing else is specified. Test by adding &Stylesheet=[number] to URL
|
|
Line 198: Line 199:


|'''defaultTemplateID'''
|'''defaultTemplateID'''
Default Template (ID)
|Default Template (ID)
|Form template to use in ITEM mode if nothing else is specified. Test by adding &Template=[number] to URL
|Form template to use in ITEM mode if nothing else is specified. Test by adding &Template=[number] to URL
|
|
Line 204: Line 205:


|'''defaultWrapperID'''
|'''defaultWrapperID'''
Default Wrapper (ID)
|Default Wrapper (ID)
|WrapperID to use if nothing else is specified. Test by adding &Wrapper=[number] to URL
|WrapperID to use if nothing else is specified. Test by adding &Wrapper=[number] to URL
|
|
Line 210: Line 211:


|'''doFormAutosave'''
|'''doFormAutosave'''
Autosave changed forms
|Autosave changed forms
|Allow editor to autocommit data before session times out
|Allow editor to autocommit data before session times out
|
|
Line 216: Line 217:


|'''doItemBrowserTitle'''
|'''doItemBrowserTitle'''
Display item resume in browser title
|Display item resume in browser title
|Change browser title/tab title to current records Resume value in ITEM mode
|Change browser title/tab title to current records Resume value in ITEM mode
|
|
Line 222: Line 223:


|'''doItemCreateAddMore'''
|'''doItemCreateAddMore'''
Button to add more records
|Button to add more records
|Add multiple records during new record creation (button)
|Add multiple records during new record creation (button)
|
|
Line 228: Line 229:


|'''doItemMenuCopyPaste'''
|'''doItemMenuCopyPaste'''
Show copy/paste in during record edits
|Show copy/paste in during record edits
|Extra buttons for copy/paste operations in ITEM mode
|Extra buttons for copy/paste operations in ITEM mode
|
|
Line 234: Line 235:


|'''DoLinkedCSS'''
|'''DoLinkedCSS'''
CSS style links
|CSS style links
|Link CSS content so that browsers can cache the content. Recommended.
|Link CSS content so that browsers can cache the content. Recommended.
|
|
Line 240: Line 241:


|'''doListShowAllFields'''
|'''doListShowAllFields'''
Allow show all fields button
|Allow show all fields button
|Optional button i menu for selecting all columns / fields in LIST mode
|Optional button i menu for selecting all columns / fields in LIST mode
|
|
Line 246: Line 247:


|'''doListShowAllRecords'''
|'''doListShowAllRecords'''
Allow show all records in list view
|Allow show all records in list view
|Optional button i menu for selecting all records in LIST mode
|Optional button i menu for selecting all records in LIST mode
|
|
Line 252: Line 253:


|'''doListShowLinkHeader'''
|'''doListShowLinkHeader'''
Display link in headers
|Display link in headers
|Display link to list as part of header name
|Display link to list as part of header name
|
|
Line 258: Line 259:


|'''doListShowNameHeader'''
|'''doListShowNameHeader'''
Display header in lists
|Display header in lists
|Display the name of the solution above the list
|Display the name of the solution above the list
|
|
Line 264: Line 265:


|'''doListShowSearchHeader'''
|'''doListShowSearchHeader'''
Show search headers
|Show search headers
|Display descriptive header in search form
|Display descriptive header in search form
|
|
Line 270: Line 271:


|'''doPageNavigatorAllways'''
|'''doPageNavigatorAllways'''
Allways show navigator in lists
|Allways show navigator in lists
|Page navigator can be disabled if all records can displayed in one page
|Page navigator can be disabled if all records can displayed in one page
|
|
Line 276: Line 277:


|'''doPersonalFlagsOnItems'''
|'''doPersonalFlagsOnItems'''
Display user flags on items
|Display user flags on items
|Allow users to make bookmark / personal comments on single items
|Allow users to make bookmark / personal comments on single items
|
|
Line 282: Line 283:


|'''doPersonalLinksOnItems'''
|'''doPersonalLinksOnItems'''
Display personal links on single items
|Display personal links on single items
|Display submenu of personal options in ITEM mode. By default only displayed i list / main mode
|Display submenu of personal options in ITEM mode. By default only displayed i list / main mode
|
|
Line 288: Line 289:


|'''doPersonalLinksOnLists'''
|'''doPersonalLinksOnLists'''
Display personal links on lists
|Display personal links on lists
|Display submenu of personal options in LIST mode.  
|Display submenu of personal options in LIST mode.  
|
|
Line 294: Line 295:


|'''doRecentItemsBookmarks'''
|'''doRecentItemsBookmarks'''
Show recent items list
|Show recent items list
|Trach and diaply recently accessed items.  
|Trach and diaply recently accessed items.  
|
|
Line 300: Line 301:


|'''doStatusFinalDisableEditing'''
|'''doStatusFinalDisableEditing'''
Disable editing if status is final
|Disable editing if status is final
|Allow records to be edited even after the item has reached a status that is final
|Allow records to be edited even after the item has reached a status that is final
|
|
Line 306: Line 307:


|'''DoTimeDecimal'''
|'''DoTimeDecimal'''
Display date sums with decimals
|Display date sums with decimals
|Is time measured on items displayed using decimal og integer values
|Is time measured on items displayed using decimal og integer values
|
|
Line 312: Line 313:


|'''errorAdvancedView'''
|'''errorAdvancedView'''
Advanced error handling
|Advanced error handling
|Display explanation and contact details if exceptions occur
|Display explanation and contact details if exceptions occur
|
|
Line 318: Line 319:


|'''errorUnkownImage'''
|'''errorUnkownImage'''
Advanced error logo
|Advanced error logo
|Logo to display i advanced error handling
|Logo to display i advanced error handling
|
|
Line 324: Line 325:


|'''guiClickableList'''
|'''guiClickableList'''
Click/doubleclick lists
|Click/doubleclick lists
|List views can be clicked to edit (double) or show (single)
|List views can be clicked to edit (double) or show (single)
|
|
Line 330: Line 331:


|'''guiDialogAdvanced'''
|'''guiDialogAdvanced'''
Use advanced popups
|Use advanced popups
|Uses JQuery style dialog for poup windows with inline scrolling
|Uses JQuery style dialog for poup windows with inline scrolling
|http://jqueryui.com/dialog/
|http://jqueryui.com/dialog/
Line 337: Line 338:


|'''guiFieldHelpOffsetLeft'''
|'''guiFieldHelpOffsetLeft'''
Field help popup offset LEFT
|Field help popup offset LEFT
|Window relative position to link on X axis
|Window relative position to link on X axis
|
|
Line 343: Line 344:


|'''guiFieldHelpOffsetTop'''
|'''guiFieldHelpOffsetTop'''
Field help popup offset TOP
|Field help popup offset TOP
|Window relative position to link on Y axis
|Window relative position to link on Y axis
|
|
Line 349: Line 350:


|'''guiPreventDoubleClick'''
|'''guiPreventDoubleClick'''
Prevent doubleclick
|Prevent doubleclick
|Deactivate multi click on codeunit buttons
|Deactivate multi click on codeunit buttons
|
|
Line 355: Line 356:


|'''guiSetFormFocus'''
|'''guiSetFormFocus'''
Set form focus
|Set form focus
|Set focus to first element in edit mode
|Set focus to first element in edit mode
|
|
Line 361: Line 362:


|'''guiSmartKeystrokes'''
|'''guiSmartKeystrokes'''
Use keyboard navigation
|Use keyboard navigation
|Navigate with arrow keys, escape and tabulation
|Navigate with arrow keys, escape and tabulation
|[[Features/Key navigation]]
|[[Features/Key navigation]]
Line 367: Line 368:


|'''guiTouchEnhancement'''
|'''guiTouchEnhancement'''
Enhance touch experience
|Enhance touch experience
|Make larger buttons and enable quicksearch by default
|Make larger buttons and enable quicksearch by default
|
|
Line 373: Line 374:


|'''headerSeperator'''
|'''headerSeperator'''
Seperator sign for headers
|Seperator sign for headers
|Dot between header parts - ex. MySolution - Dashboard
|Dot between header parts - ex. MySolution - Dashboard
|
|
Line 379: Line 380:


|'''mainRedirect'''
|'''mainRedirect'''
Main menu redirect active
|Main menu redirect active
|Redirect to alternative main menu active
|Redirect to alternative main menu active
|
|
Line 385: Line 386:


|'''mainRedirectUrl'''
|'''mainRedirectUrl'''
Main menu redirect URL
|Main menu redirect URL
|Local path ex. main?command=list&SagID=0
|Local path ex. main?command=list&SagID=0
|
|
Line 391: Line 392:


|'''renderMenuItemClass'''
|'''renderMenuItemClass'''
Use CSS class for menu items
|Use CSS class for menu items
|Give unique class property to each menu item.
|Give unique class property to each menu item.
|
|
Line 397: Line 398:


|'''subformLinesDefault'''
|'''subformLinesDefault'''
Number of lines in subforms
|Number of lines in subforms
|Default number of records displayed in subforms
|Default number of records displayed in subforms
|
|
Line 403: Line 404:


|'''toolBarcodeParameters'''
|'''toolBarcodeParameters'''
Barcode additional parameters
|Barcode additional parameters
|Extra parameter for barcode, for tweaking size, type etc.
|Extra parameter for barcode, for tweaking size, type etc.
|
|
Line 409: Line 410:


|'''userOnlineList'''
|'''userOnlineList'''
Maintain list of online users
|Maintain list of online users
|Monitor users online - ie. users with an active session on the server. Recommended in single front server environments.
|Monitor users online - ie. users with an active session on the server. Recommended in single front server environments.
|
|
Line 415: Line 416:


|'''userRequireAcceptTerms'''
|'''userRequireAcceptTerms'''
Require new user to accept usage terms
|Require new user to accept usage terms
|Configure text in System configurations
|Configure text in System configurations
|
|
Line 423: Line 424:
=== Active directory ===
=== Active directory ===
{|
{|
!policy name
!System name
!explantion
!Display name
!extra info
!Explantion
!Extra info
|-
|-
|'''ldapAuthentication'''
|'''ldapAuthentication'''
Use LDAP authentication
|Use LDAP authentication
|Is LDAP logon active ?
|Is LDAP logon active ?
|[[Integration/LDAP]]
|[[Integration/LDAP]]
Line 434: Line 436:


|'''ldapAuthenticationFallback'''
|'''ldapAuthenticationFallback'''
Use fallback authentication if LDAP fails
|Use fallback authentication if LDAP fails
|Allow internal database verfication using stored passwords, in the event that the LDAP server fails to respond properly.
|Allow internal database verfication using stored passwords, in the event that the LDAP server fails to respond properly.
|[[Integration/LDAP]]
|[[Integration/LDAP]]
Line 440: Line 442:


|'''ldapCreateUsers'''
|'''ldapCreateUsers'''
Allow creation of new users
|Allow creation of new users
|Create users logging in, that cannot be found inside the LDAP. User must belong to ldapDomainDefault
|Create users logging in, that cannot be found inside the LDAP. User must belong to ldapDomainDefault
|[[Integration/LDAP]]
|[[Integration/LDAP]]
Line 446: Line 448:


|'''ldapDomainDefault'''
|'''ldapDomainDefault'''
Default domain
|Default domain
|
|
|[[Integration/LDAP]]
|[[Integration/LDAP]]
Line 452: Line 454:


|'''ldapMaintainGroupsOnLogon'''
|'''ldapMaintainGroupsOnLogon'''
Maintain groups on logon
|Maintain groups on logon
|LDAP validation also synchronizes groups found for logged in user.
|LDAP validation also synchronizes groups found for logged in user.
|[[Integration/LDAP]]
|-
|'''ldapPassword'''
LDAP setup: PASSWORD
|Service account username. Note this password is stored cleartext.
|[[Integration/LDAP]]
|[[Integration/LDAP]]
|-
|-


|'''ldapServer'''
|'''ldapServer'''
LDAP setup: LDAP server
|LDAP setup: LDAP server
|Use IP or network name
|Use IP or network name
|[[Integration/LDAP]]
|[[Integration/LDAP]]
Line 470: Line 466:


|'''ldapUsername'''
|'''ldapUsername'''
LDAP setup: USERNAME
|LDAP setup: USERNAME
|Service account username. User needs only read access.
|Service account username. User needs only read access.
|[[Integration/LDAP]]
|-
|'''ldapPassword'''
|LDAP setup: PASSWORD
|Service account username. Note this password is stored cleartext.
|[[Integration/LDAP]]
|[[Integration/LDAP]]
|-
|-
Line 478: Line 480:
=== Security ===
=== Security ===
{|
{|
!policy name
!System name
!explantion
!Display name
!extra info
!Explantion
!Extra info
|-
|-
|'''doAdvancedGroupSecurity'''
|'''doAdvancedGroupSecurity'''
Advanced group security
|Advanced group security
|Enables: A) Groups inside groups B) Multiple exclusive groups
|Enables: A) Groups inside groups B) Multiple exclusive groups
|
|
Line 489: Line 492:


|'''policyHideValues'''
|'''policyHideValues'''
Hide overloaded policies
|Hide overloaded policies
|Hide values for policies that have been overloaded in the application deployment file
|Hide values for policies that have been overloaded in the application deployment file
|
|
Line 496: Line 499:


|'''securityAllowPublicCodeunits'''
|'''securityAllowPublicCodeunits'''
Allow anonoumus codeunit execution
|Allow anonoumus codeunit execution
|It is considered safe to use special codeunits
|It is considered safe to use special codeunits
|
|
Line 502: Line 505:


|'''securityEnforceExclusiveGroup'''
|'''securityEnforceExclusiveGroup'''
Require normal users to have Exclusive groups
|Require normal users to have Exclusive groups
|All users except Admins must have at least 1 exclusive group
|All users except Admins must have at least 1 exclusive group
|
|
Line 508: Line 511:


|'''securityLoginFailedAttempts'''
|'''securityLoginFailedAttempts'''
Login max failed logins
|Login max failed logins
|Number of failed logins before accounts will be disabled
|Number of failed logins before accounts will be disabled
|
|
Line 514: Line 517:


|'''securityLoginFailedAutoReset'''
|'''securityLoginFailedAutoReset'''
AutoReset users
|AutoReset users
|Automatically reset users that have failed maximum number of logins (sends new password)
|Automatically reset users that have failed maximum number of logins (sends new password)
|
|
Line 520: Line 523:


|'''securityPasswordAcceptMD5digest'''
|'''securityPasswordAcceptMD5digest'''
Allow MD5 hashed passwords
|Allow MD5 hashed passwords
|Recommended in transition between MD5 (minor flaws) and SHA256 (very secure)  
|Recommended in transition between MD5 (minor flaws) and SHA256 (very secure)  
|
|
Line 526: Line 529:


|'''securityPasswordCleartext'''
|'''securityPasswordCleartext'''
Store passwords cleartext
|Store passwords cleartext
|Allow passwords to be stored without one-way encryption
|Allow passwords to be stored without one-way encryption
|
|
Line 532: Line 535:


|'''securityPasswordCleartextAllowed'''
|'''securityPasswordCleartextAllowed'''
Allow cleartext passwords
|Allow cleartext passwords
|Optionally encode all password using admin services
|Optionally encode all password using admin services
|
|
Line 538: Line 541:


|'''securityResetPasswordWithoutLogin'''
|'''securityResetPasswordWithoutLogin'''
Reset password without login
|Reset password without login
|
|
|
|
Line 544: Line 547:


|'''securitySslLogin'''
|'''securitySslLogin'''
SSL encryption for login page
|SSL encryption for login page
|Enforce usage of SSL connections on login page using internal redirect. Recommended.
|Enforce usage of SSL connections on login page using internal redirect. Recommended.
|[[Setting up SSL/HTTPS]]
|[[Setting up SSL/HTTPS]]
Line 550: Line 553:


|'''securitySslPages'''
|'''securitySslPages'''
SSL encryption for ALL pages
|SSL encryption for ALL pages
|Enforce usage of SSL connections on all page using internal redirect. Not recommended.
|Enforce usage of SSL connections on all page using internal redirect. Not recommended.
|[[Setting up SSL/HTTPS]]
|[[Setting up SSL/HTTPS]]
Line 556: Line 559:


|'''securityTokenExpiryEnforce'''
|'''securityTokenExpiryEnforce'''
Deny old style access tokens
|Deny old style access tokens
|
|
|
|
Line 562: Line 565:


|'''ssoSpnegoAuthenticate'''
|'''ssoSpnegoAuthenticate'''
SSO via domain controller
|SSO via domain controller
|Allow SPNEGO filter to automatically log in authenticated Windows users  
|Allow SPNEGO filter to automatically log in authenticated Windows users  
|
|
Line 568: Line 571:


|'''ssoCryptoTokenActive'''
|'''ssoCryptoTokenActive'''
SSO token authentication
|SSO token authentication
|Allow single sigon from externatal components (ex. TS SSO webpart)
|Allow single sigon from externatal components (ex. TS SSO webpart)
|
|
Line 574: Line 577:


|'''ssoCryptoTokenSecret'''
|'''ssoCryptoTokenSecret'''
SSO token shared secret
|SSO token shared secret
|Shared secret password between TS and external services. Value must match exactly.
|Shared secret password between TS and external services. Value must match exactly.
|
|
Line 582: Line 585:
=== Scheduled services ===
=== Scheduled services ===
{|
{|
!policy name
!System name
!explantion
!Display name
!extra info
!Explantion
!Extra info
|-
|-
|'''accountAnonoumousMeasure'''
|'''accountAnonoumousMeasure'''
Anonoumous account (UserID)
|Anonoumous account (UserID)
|UserID used for normal system iteractions using the solution interfaces
|UserID used for normal system iteractions using the solution interfaces
|
|
Line 593: Line 597:


|'''adminWarningSmsList'''
|'''adminWarningSmsList'''
Warning SMS number list
|Warning SMS number list
|List of administrator mobile phone lists (for notifications)
|List of administrator mobile phone lists (for notifications)
|
|
Line 599: Line 603:


|'''healthMonitorPassword'''
|'''healthMonitorPassword'''
Health monitor password
|Health monitor password
|Parameter/password to access basic monitor service without a login (usage: service?healtMonitorPassword)
|Parameter/password to access basic monitor service without a login (usage: service?healtMonitorPassword)
|
|
Line 605: Line 609:


|'''integrationInvokeCodeunit'''
|'''integrationInvokeCodeunit'''
Integration execute codeunit
|Integration execute codeunit
|Execute codeunits during dataintegration / webservices
|Execute codeunits during dataintegration / webservices
|
|
Line 611: Line 615:


|'''maintenenceEmergencyDelay'''
|'''maintenenceEmergencyDelay'''
Emergency shutdown delay
|Emergency shutdown delay
|Number of minutes to warn users when af EMERGENCY signal is sent to the server from the admin services
|Number of minutes to warn users when af EMERGENCY signal is sent to the server from the admin services
|
|
Line 617: Line 621:


|'''maintenenceLockdoorDelay'''
|'''maintenenceLockdoorDelay'''
Maintenence disable login delay
|Maintenence disable login delay
|Number of minutes before af shutdown where users are no longer allowed to log in
|Number of minutes before af shutdown where users are no longer allowed to log in
|
|
Line 623: Line 627:


|'''maintenenceShutdownDelay'''
|'''maintenenceShutdownDelay'''
Maintenence shutdown delay
|Maintenence shutdown delay
|Number of minutes to warn users when af MAINTENENCE signal is sent to the server from the admin services
|Number of minutes to warn users when af MAINTENENCE signal is sent to the server from the admin services
|
|
Line 629: Line 633:


|'''measureAnonoumous'''
|'''measureAnonoumous'''
Measure anonoumous users
|Measure anonoumous users
|
|
|
|
Line 635: Line 639:


|'''measureInsertDelayCount'''
|'''measureInsertDelayCount'''
Measure insert delay (items)
|Measure insert delay (items)
|
|
|
|
Line 641: Line 645:


|'''measureInsertDelayMinutes'''
|'''measureInsertDelayMinutes'''
Measure insert delay (minutes)
|Measure insert delay (minutes)
|
|
|
|
Line 647: Line 651:


|'''measureInsertUsingBatch'''
|'''measureInsertUsingBatch'''
Measure insert in batches
|Measure insert in batches
|
|
|
|
Line 653: Line 657:


|'''serviceAdminStatusEmail'''
|'''serviceAdminStatusEmail'''
Administrator email
|Administrator email
|Administrator email for sending status updates
|Administrator email for sending status updates
|
|
Line 659: Line 663:


|'''serviceStatusActionSendDirectly'''
|'''serviceStatusActionSendDirectly'''
Send status actions directly by mail
|Send status actions directly by mail
|False: Insert into user notifications. True: Send per email
|False: Insert into user notifications. True: Send per email
|
|
Line 665: Line 669:


|'''serviceWebsiteMonitorGW'''
|'''serviceWebsiteMonitorGW'''
Website monitor goodword
|Website monitor goodword
|Information that needs to be found in a page located at serviceWebsiteMonitorURL
|Information that needs to be found in a page located at serviceWebsiteMonitorURL
|
|
Line 671: Line 675:


|'''serviceWebsiteMonitorURL'''
|'''serviceWebsiteMonitorURL'''
Website monitor URL
|Website monitor URL
|Address to monitor where the serviceWebsiteMonitorGW should be found
|Address to monitor where the serviceWebsiteMonitorGW should be found
|
|
Line 677: Line 681:


|'''userOnlineAlertOnNewNotification'''
|'''userOnlineAlertOnNewNotification'''
Notify online users directly
|Notify online users directly
|Display new button when users are allready logged in
|Display new button when users are allready logged in
|
|
Line 683: Line 687:


|'''userOnlineListDisplayCount'''
|'''userOnlineListDisplayCount'''
Display number of online users
|Display number of online users
|Display number of online users at bottom of all pages
|Display number of online users at bottom of all pages
|
|
|-
|-
|}
|}


=== Debug ===
=== Debug ===
{|
{|
!policy name
!System name
!explantion
!Display name
!extra info
!Explantion
!Extra info
|-
|-
|'''debugCacheResponse'''
|'''debugCacheResponse'''
Caching succes / failure
|Caching succes / failure
|Log effects of caching.  
|Log effects of caching.  
|
|
Line 703: Line 707:


|'''debugDaemonActivity'''
|'''debugDaemonActivity'''
Debug daemon runs
|Debug daemon runs
|Log all runs for Service and Server daemon
|Log all runs for Service and Server daemon
|
|
Line 709: Line 713:


|'''debugDataLoads'''
|'''debugDataLoads'''
Debug while loading data (CSV/XML)
|Debug while loading data (CSV/XML)
|Debugging option for designers and developers
|Debugging option for designers and developers
|
|
Line 715: Line 719:


|'''debugExceptions'''
|'''debugExceptions'''
Debug all Exceptions
|Debug all Exceptions
|Writes stacktrace to logfiles. Alternative: Only write to eventlog.
|Writes stacktrace to logfiles. Alternative: Only write to eventlog.
|
|
Line 721: Line 725:


|'''debugIntegration'''
|'''debugIntegration'''
Debug integration messages
|Debug integration messages
|Debugging option for designers and developers
|Debugging option for designers and developers
|
|
Line 727: Line 731:


|'''debugLdapCommunication'''
|'''debugLdapCommunication'''
Debug LDAP communication
|Debug LDAP communication
|Debugging option for designers and developers
|Debugging option for designers and developers
|
|
Line 733: Line 737:


|'''debugLdapStacktrace'''
|'''debugLdapStacktrace'''
Debug LDAP error details
|Debug LDAP error details
|Debugging option for designers and developers
|Debugging option for designers and developers
|
|
Line 739: Line 743:


|'''debugLdapValidation'''
|'''debugLdapValidation'''
Debug LDAP validation
|Debug LDAP validation
|Debugging option for designers and developers
|Debugging option for designers and developers
|
|
Line 745: Line 749:


|'''debugLoginResults'''
|'''debugLoginResults'''
Debug all user logins
|Debug all user logins
|Debugging option for designers and developers
|Debugging option for designers and developers
|
|
Line 751: Line 755:


|'''debugOlapDefinitions'''
|'''debugOlapDefinitions'''
Debug OLAP definitions
|Debug OLAP definitions
|Write all schemas and querys to logfiles on boot
|Write all schemas and querys to logfiles on boot
|
|
Line 757: Line 761:


|'''debugQuerySQL'''
|'''debugQuerySQL'''
Debug all SQL queries
|Debug all SQL queries
|All queries are written to System.out / logfile
|All queries are written to System.out / logfile
|
|
Line 763: Line 767:


|'''debugQuestionaire'''
|'''debugQuestionaire'''
Debug questionaire steps
|Debug questionaire steps
|Display extra information in questionaire mode
|Display extra information in questionaire mode
|
|
Line 769: Line 773:


|'''debugRequestPerSecond'''
|'''debugRequestPerSecond'''
Debug requests/second
|Debug requests/second
|Calculate server load on run. Results are sent to System.out / logfile
|Calculate server load on run. Results are sent to System.out / logfile
|
|
Line 775: Line 779:


|'''debugRequestTime'''
|'''debugRequestTime'''
Debug response time
|Debug response time
|
|
|
|
Line 781: Line 785:


|'''debugRequestTimeToPage'''
|'''debugRequestTimeToPage'''
Debug response time on page
|Debug response time on page
|Display response time in bottom of all pages (no performance impact).
|Display response time in bottom of all pages (no performance impact).
|
|
Line 787: Line 791:


|'''debugScriptFunctions'''
|'''debugScriptFunctions'''
Debug JavaScript
|Debug JavaScript
|Allow JS errors to be displayed
|Allow JS errors to be displayed
|
|
Line 793: Line 797:


|'''debugServiceDaemon'''
|'''debugServiceDaemon'''
Debug the Service runner Daemon
|Debug the Service runner Daemon
|Write extra information from service clients to log files
|Write extra information from service clients to log files
|
|
Line 799: Line 803:


|'''debugTemplateHandling'''
|'''debugTemplateHandling'''
Debug template parsing
|Debug template parsing
|Debugging option for designers and developers
|Debugging option for designers and developers
|
|
Line 805: Line 809:


|'''debugTokenEvaluation'''
|'''debugTokenEvaluation'''
Debug token evaluation
|Debug token evaluation
|Debugging option for designers and developers
|Debugging option for designers and developers
|
|
Line 811: Line 815:


|'''debugWebservices'''
|'''debugWebservices'''
Debug the Webservice interface
|Debug the Webservice interface
|Debugging option for designers and developers
|Debugging option for designers and developers
|
|
|-
|-
|}
|}


=== Filesystem ===
=== Filesystem ===
{|
{|
!policy name
!System name
!explantion
!Display name
!extra info
!Explantion
!Extra info
|-
|-
|'''folderImportFile'''
|'''folderImportFile'''
Folder: Import files
|Folder: Import files
|Processing folder. Will be set to default value if left empty.
|Processing folder. Will be set to default value if left empty.
|
|
Line 831: Line 835:


|'''folderIntegrationCSV'''
|'''folderIntegrationCSV'''
Folder: CSV data files
|Folder: CSV data files
|Processing folder. Will be set to default value if left empty.
|Processing folder. Will be set to default value if left empty.
|[[Policy/folderIntegrationCSV]]
|[[Policy/folderIntegrationCSV]]
Line 837: Line 841:


|'''folderIntegrationMail'''
|'''folderIntegrationMail'''
Folder: Mail integration (temporary)
|Folder: Mail integration (temporary)
|Processing folder. Will be set to default value if left empty.
|Processing folder. Will be set to default value if left empty.
|
|
Line 843: Line 847:


|'''folderIntegrationXML'''
|'''folderIntegrationXML'''
Folder: XML integration processing
|Folder: XML integration processing
|Processing folder. Will be set to default value if left empty.
|Processing folder. Will be set to default value if left empty.
|[[Policy/folderIntegrationXML]]
|[[Policy/folderIntegrationXML]]
Line 849: Line 853:


|'''folderTemplateLoad'''
|'''folderTemplateLoad'''
Folder: Template cache
|Folder: Template cache
|Processing folder. Will be set to default value if left empty.
|Processing folder. Will be set to default value if left empty.
|
|
Line 855: Line 859:


|'''folderTemplateSave'''
|'''folderTemplateSave'''
Folder: Template processing
|Folder: Template processing
|Processing folder. Will be set to default value if left empty.
|Processing folder. Will be set to default value if left empty.
|
|
Line 861: Line 865:


|'''folderUpload'''
|'''folderUpload'''
Folder: Upload
|Folder: Upload
|Processing folder. Will be set to default value if left empty.
|Will be set to default value if left empty.
|
|
|-
|-


|'''folderUploadTemp'''
|'''folderUploadTemp'''
Folder: Upload processing
|Folder: Upload processing
|Processing folder. Will be set to default value if left empty.
|Processing folder. Will be set to default value if left empty.
|
|
Line 873: Line 877:


|'''mediaFilterDelayMS'''
|'''mediaFilterDelayMS'''
Media files download latency
|Media files download latency
|Use if filesystem is slow to pick up changes
|Use if filesystem is slow to pick up changes
|
|
Line 879: Line 883:


|'''overloadApplicationFolder'''
|'''overloadApplicationFolder'''
Application folder
|Application folder
|Option to override. Empty value = autodetect
|Option to override. Empty value = autodetect
|
|
Line 885: Line 889:


|'''uploadPictureResize'''
|'''uploadPictureResize'''
Reduce uploaded pictures
|Reduce uploaded pictures
|Resize all pictures sent to server to size defined in uploadPictureSizeMaximum
|Resize all pictures sent to server to size defined in uploadPictureSizeMaximum
|
|
Line 891: Line 895:


|'''uploadPictureSizeMaximum'''
|'''uploadPictureSizeMaximum'''
Picture maximum size
|Picture maximum size
|Scale pictures to this maximum of pixels. Maximum height/width determines size. Only works if uploadPictureResize is set
|Scale pictures to this maximum of pixels. Maximum height/width determines size. Only works if uploadPictureResize is set
|
|
Line 897: Line 901:


|'''uploadPictureSizeThumbnail'''
|'''uploadPictureSizeThumbnail'''
Thumbnail maximum size
|Thumbnail maximum size
|
|
|
|
Line 904: Line 908:


|'''uploadClientScaling'''
|'''uploadClientScaling'''
Use clientside graphic scaling
|Use clientside graphic scaling
|Let browser resize pictures before upload
|Let browser resize pictures before upload
|
|
Line 911: Line 915:


|'''uploadClientScalingExclude'''
|'''uploadClientScalingExclude'''
Clientside exlusion test for scaling
|Clientside exlusion test for scaling
|Set to "false" or exclusion pattern:
|Set to "false" or exclusion pattern:
     /Android(?!.*Chrome)|Opera/ .test(window.navigator && navigator.userAgent)
     /Android(?!.*Chrome)|Opera/ .test(window.navigator && navigator.userAgent)
Line 919: Line 923:


|'''uploadThreadProcessing'''
|'''uploadThreadProcessing'''
Upload processing threads
|Upload processing threads
|Beta function. Handle file processing with threads to improve Ui responsiveness.
|Beta function. Handle file processing with threads to improve Ui responsiveness.
|
|
Line 925: Line 929:


|'''uploadThreadOnlyPictures'''
|'''uploadThreadOnlyPictures'''
Upload processing threads: Graphics only
|Upload processing threads: Graphics only
|Restrict upload threads to resizeable graphics. Requires Upload processing threads
|Restrict upload threads to resizeable graphics. Requires Upload processing threads
|
|
Line 934: Line 938:
=== Service daemon ===
=== Service daemon ===
{|
{|
!policy name
!System name
!explantion
!Display name
!extra info
!Explantion
!Extra info
|-
|-
|'''serviceAutostart'''
|'''serviceAutostart'''
Autostart service daemon
|Autostart service daemon
|Start the service daemon after boot.
|Start the service daemon after boot.
|
|
Line 945: Line 950:


|'''serviceDaemonHeartbeatSeconds'''
|'''serviceDaemonHeartbeatSeconds'''
Run daemon every seconds
|Run daemon every seconds
|Frequency of daemon runs. Value should match the frequency of the most demanding service.
|Frequency of daemon runs. Value should match the frequency of the most demanding service.
|
|
Line 951: Line 956:


|'''serviceLogentriesConsolidate'''
|'''serviceLogentriesConsolidate'''
Compress logs
|Compress logs
|
|
|
|
Line 957: Line 962:


|'''serviceLogentriesMaximumAge'''
|'''serviceLogentriesMaximumAge'''
Maximum age logs
|Maximum age logs
|
|
|
|
Line 963: Line 968:


|'''serviceNotificationDeleteAfterDays'''
|'''serviceNotificationDeleteAfterDays'''
Maximum age notifications
|Maximum age notifications
|
|
|
|
|-
|-
|}
|}


=== Eventlog ===
=== Eventlog ===
{|
{|
!policy name
!System name
!explantion
!Display name
!extra info
!Explantion
!Extra info
|-
|-
|'''eventDelayWrite'''
|'''eventDelayWrite'''
Burst-write events
|Burst-write events
|Collect Events together in bundles in order to optimize dataload. Events can be written forcefully using the service servlet.
|Collect Events together in bundles in order to optimize dataload. Events can be written forcefully using the service servlet.
|
|
Line 983: Line 988:


|'''eventDelayWriteItemMaximum'''
|'''eventDelayWriteItemMaximum'''
Burst-write event count
|Burst-write event count
|Number of events before burstwrite executes. Events can be written forcefully using the service servlet.
|Number of events before burstwrite executes. Events can be written forcefully using the service servlet.
|
|
Line 989: Line 994:


|'''eventPrintToStandardOut'''
|'''eventPrintToStandardOut'''
Copy errors to server log
|Copy errors to server log
|Write errors to logfiles when logging to builtin eventlog in the database
|Write errors to logfiles when logging to builtin eventlog in the database
|
|
Line 995: Line 1,000:


|'''eventWriteSuccesfullLogins'''
|'''eventWriteSuccesfullLogins'''
Write succesfull logins
|Write succesfull logins
|Log all user logins to the event log. Note that all logins regardless are logged on the user profile.
|Log all user logins to the event log. Note that all logins regardless are logged on the user profile.
|
|
|-
|-
|}
|}


=== Mail server ===
=== Mail server ===
{|
{|
!policy name
!System name
!explantion
!Display name
!extra info
!Explantion
!Extra info
|-
|-
|'''mailDomain'''
|'''mailDomain'''
POP3: Domain
|POP3: Domain
|
|
|
|
Line 1,015: Line 1,020:


|'''mailPassword'''
|'''mailPassword'''
POP3: Password
|POP3: Password
|Mail account password. Note this password is stored cleartext.
|Mail account password. Note this password is stored cleartext.
|
|
Line 1,021: Line 1,026:


|'''mailServer'''
|'''mailServer'''
POP3: Server
|POP3: Server
|
|
|
|
Line 1,027: Line 1,032:


|'''mailUsername'''
|'''mailUsername'''
POP3: Username
|POP3: Username
|Mail account username.  
|Mail account username.  
|
|
Line 1,033: Line 1,038:


|'''smtpMailDelaySec'''
|'''smtpMailDelaySec'''
SMPT: Message delay
|SMPT: Message delay
|Delay in MS between sending emails
|Delay in SECONDS between sending emails
|[[Email server setup]]
|[[Email server setup]]
|-
|-


|'''smtpPassword'''
|'''smtpPassword'''
SMTP: Account password
|SMTP: Account password
|Password for SMTP account set in smtpUsername
|Password for SMTP account set in smtpUsername. Note this password is stored cleartext.
|[[Email server setup]]
|[[Email server setup]]
|-
|-


|'''smtpSendRetries'''
|'''smtpSendRetries'''
SMTP: Number of retries
|SMTP: Number of retries
|Number of attempts to send email from queue before giving up
|Number of attempts to send email from queue before giving up
|[[Email server setup]]
|[[Email server setup]]
Line 1,051: Line 1,056:


|'''smtpServer'''
|'''smtpServer'''
SMTP: Server address
|SMTP: Server address
|Network location of the SMTP server
|Network location of the SMTP server
|[[Email server setup]]
|[[Email server setup]]
Line 1,057: Line 1,062:


|'''smtpSystemEmail'''
|'''smtpSystemEmail'''
SMTP: System mail address
|SMTP: System mail address
|Sender address (from) set on all automatically generated emails.
|Sender address (from) set on all automatically generated emails.
|[[Email server setup]]
|[[Email server setup]]
Line 1,063: Line 1,068:


|'''smtpTestEmail'''
|'''smtpTestEmail'''
SMTP: Test email address
|SMTP: Test email address
|Recipient of all mails when test mode is activated. Activate by enabling smtpTestMode
|Recipient of all mails when test mode is activated. Activate by enabling smtpTestMode
|[[Email server setup]]
|[[Email server setup]]
Line 1,069: Line 1,074:


|'''smtpTestMode'''
|'''smtpTestMode'''
SMTP: Test mode (send to test email)
|SMTP: Test mode (send to test email)
|Enable test mode where ALL emails are sent to address specified in smtpTestEmail
|Enable test mode where ALL emails are sent to address specified in smtpTestEmail
|[[Email server setup]]
|[[Email server setup]]
Line 1,075: Line 1,080:


|'''smtpUsername'''
|'''smtpUsername'''
SMTP: Account name
|SMTP: Account name
|Example: k.pedersen
|Example: k.pedersen@lsvgroup.com
lsvgroup.com
|[[Email server setup]]
|[[Email server setup]]
|-
|-
|}
|}


=== Remote services ===
=== Remote services ===
{|
{|
!policy name
!System name
!explantion
!Display name
!extra info
!Explantion
!Extra info
|-
|-
|'''doLookupEnabledLinks'''
|'''doLookupEnabledLinks'''
Allow lookup links for fields
|Allow lookup links for fields
|
|
|
|
Line 1,096: Line 1,100:


|'''lookupServiceCvrRegisterUrl'''
|'''lookupServiceCvrRegisterUrl'''
URL to lookup CVR
|URL to lookup CVR
|
|
|
|
Line 1,102: Line 1,106:


|'''lookupServiceGeneral'''
|'''lookupServiceGeneral'''
URL to lookup text
|URL to lookup text
|
|
|
|
Line 1,108: Line 1,112:


|'''lookupServicePhonePersonUrl'''
|'''lookupServicePhonePersonUrl'''
URL to lookup contacts
|URL to lookup contacts
|
|
|
|
|-
|-
|}
|}


=== Protection ===
=== Protection ===
{|
{|
!policy name
!System name
!explantion
!Display name
!extra info
!Explantion
!Extra info
|-
|-
|'''bruteforceCooldownMinutes'''
|'''bruteforceCooldownMinutes'''
Bruteforce reject logins (minutes)
|Bruteforce reject logins (minutes)
|Time that logins are rejected after the bruteforce protection i activated.
|Time that logins are rejected after the bruteforce protection i activated.
|[[Security/Bruteforce]]
|[[Security/Bruteforce]]
Line 1,128: Line 1,132:


|'''bruteforceMaxBadLogins'''
|'''bruteforceMaxBadLogins'''
Bruteforce maximum failed logins
|Bruteforce maximum failed logins
|Amout of logins failed before new logins are rejected. Relative to bruteforceMeasurePeriod.
|Amout of logins failed before new logins are rejected. Relative to bruteforceMeasurePeriod.
|[[Security/Bruteforce]]
|[[Security/Bruteforce]]
Line 1,134: Line 1,138:


|'''bruteforceMeasurePeriod'''
|'''bruteforceMeasurePeriod'''
Bruteforce measure period (minutes)
|Bruteforce measure period (minutes)
|Timeframe for measuring amount of bad logins. Relative to bruteforceMaxBadLogins.
|Timeframe for measuring amount of bad logins. Relative to bruteforceMaxBadLogins.
|[[Security/Bruteforce]]
|[[Security/Bruteforce]]
Line 1,140: Line 1,144:


|'''bruteforceProtection'''
|'''bruteforceProtection'''
Bruteforce detection active
|Bruteforce detection active
|Enable brute force detection mechanisms
|Enable brute force detection mechanisms
|[[Security/Bruteforce]]
|[[Security/Bruteforce]]
Line 1,146: Line 1,150:


|'''securitySantizeAllUserInput'''
|'''securitySantizeAllUserInput'''
Check all user input for JScripts
|Check all user input for JScripts
|Allow only if session variable protection is enabled
|Allow only if session variable protection is enabled
|
|
|-
|-
|}
|}


=== License ===
=== License ===
{|
{|
!policy name
!System name
!explantion
!Display name
!extra info
!Explantion
!Extra info
|-
|-
|'''licenseHolder'''
|'''licenseHolder'''
License: Owner
|License: Owner
|Company/intitution name on the license
|Company/intitution name on the license
|
|
Line 1,166: Line 1,170:


|'''licenseNumber'''
|'''licenseNumber'''
License: Number
|License: Number
|ID received from your Tempus Serva distrbutor
|ID received from your Tempus Serva distrbutor
|
|
Line 1,172: Line 1,176:


|'''licenseReportAdministrator'''
|'''licenseReportAdministrator'''
2nd recepiant of license reports
|2nd recipient of license reports
|Secondary recepiant of license reporting. Normally the license seller.
|Secondary recepiant of license reporting. Normally the license seller.
|
|
Line 1,178: Line 1,182:


|'''licenseReportingEmail'''
|'''licenseReportingEmail'''
1st recepiant of license reports
|1st recipient of license reports
|Primary recepiant of license reporting. Normally the responsible CIO.
|Primary recepiant of license reporting. Normally the responsible CIO.
|
|
Line 1,184: Line 1,188:


|'''licenseReportLicenseServer'''
|'''licenseReportLicenseServer'''
License reporting active
|License reporting active
|License reporting active
|License reporting active
|
|
Line 1,190: Line 1,194:


|'''licenseSerial'''
|'''licenseSerial'''
License: Serial code
|License: Serial code
|Code received from your Tempus Serva distrbutor
|Code received from your Tempus Serva distrbutor
|
|
|-
|-
|}
|}


=== Database ===
=== Database ===
{|
{|
!policy name
!System name
!explantion
!Display name
!extra info
!Explantion
!Extra info
|-
|-
|'''dbAutoUpdate'''
|'''dbAutoUpdate'''
Update database on boot (recommended)
|Update database on boot (recommended)
|Strongly recommended. Allows system to update the database when new builds are deployed.
|Strongly recommended. Allows system to update the database when new builds are deployed.
|
|
Line 1,210: Line 1,214:


|'''dbNameBase'''
|'''dbNameBase'''
SHARED database name
|SHARED database name
|Schema name of database with common settings. Database can be shared between multiple installations.
|Schema name of database with common settings. Database can be shared between multiple installations.
|
|
|-
|-
|}
|}


=== SMS service ===
=== SMS service ===
{|
{|
!policy name
!System name
!explantion
!Display name
!extra info
!Explantion
!Extra info
|-
|-
|'''smsConnectUrl'''
|'''smsConnectUrl'''
SMS Service gateway URL
|SMS Service gateway URL
|
|
|
|
Line 1,230: Line 1,234:


|'''smsErrorMessage'''
|'''smsErrorMessage'''
SMS error message
|SMS error message
|
|
|
|
Line 1,236: Line 1,240:


|'''smsMaxLength'''
|'''smsMaxLength'''
SMS maximum message length
|SMS maximum message length
|
|
|
|
Line 1,242: Line 1,246:


|'''smsParamMessage'''
|'''smsParamMessage'''
SMS parameter name: Message
|SMS parameter name: Message
|
|
|
|
Line 1,248: Line 1,252:


|'''smsParamNumber'''
|'''smsParamNumber'''
SMS parameter name: Number
|SMS parameter name: Number
|
|
|
|
Line 1,254: Line 1,258:


|'''smsPhoneCountryCode'''
|'''smsPhoneCountryCode'''
SMS phonenumber prefix
|SMS phonenumber prefix
|
|
|
|
Line 1,260: Line 1,264:


|'''smsPhoneMinLength'''
|'''smsPhoneMinLength'''
SMS phonenumber min length
|SMS phonenumber min length
|
|
|
|
Line 1,266: Line 1,270:


|'''smsTestMode'''
|'''smsTestMode'''
SMS testmode active
|SMS testmode active
|
|
|[[Email server setup]]
|[[Email server setup]]
Line 1,272: Line 1,276:


|'''smsTestNumber'''
|'''smsTestNumber'''
SMS testmode number
|SMS testmode number
|
|
|[[Email server setup]]
|[[Email server setup]]
|-
|-
|}
|}


=== Main menu ===
=== Main menu ===
{|
{|
!policy name
!System name
!explantion
!Display name
!extra info
!Explantion
!Extra info
|-
|-


|'''doInformationInMasterMenu'''
|'''doInformationInMasterMenu'''
Allow news articles
|Allow news articles
|Display relevant news articles and messages on main page
|Display relevant news articles and messages on main page
|
|
Line 1,293: Line 1,297:


|'''doMainMenuAccordion'''
|'''doMainMenuAccordion'''
Use animated main menu
|Use animated main menu
|Use slick JQuery dropdown accordion based on sections
|Use slick JQuery dropdown accordion based on sections
|http://jqueryui.com/accordion/
|http://jqueryui.com/accordion/
Line 1,299: Line 1,303:


|'''doMainMenuCreateItems'''
|'''doMainMenuCreateItems'''
Display create link in main menu
|Display create link in main menu
|Display button to create records directly from the mail menu
|Display button to create records directly from the mail menu
|
|
Line 1,305: Line 1,309:


|'''doMainMenuDescription'''
|'''doMainMenuDescription'''
Display descriptions in main menu
|Display descriptions in main menu
|Display solution description in the main menu. Alternatively you can just leave the desciption empty.
|Display solution description in the main menu. Alternatively you can just leave the desciption empty.
|
|
Line 1,311: Line 1,315:


|'''doMainMenuRecentItems'''
|'''doMainMenuRecentItems'''
Display recent items in main menu
|Display recent items in main menu
|Display list of recent items accessed for each solution in the list.  
|Display list of recent items accessed for each solution in the list.  
|
|
Line 1,317: Line 1,321:


|'''doMainMenuSections'''
|'''doMainMenuSections'''
Divide menu into solution groups
|Divide menu into solution groups
|Split the main menu into sections.
|Split the main menu into sections.
|
|
Line 1,323: Line 1,327:


|'''doViewListInMasterMenu'''
|'''doViewListInMasterMenu'''
Show user views in master menu
|Show user views in master menu
|Display list of shared and personal views in the main menu
|Display list of shared and personal views in the main menu
|
|
Line 1,331: Line 1,335:
=== Special fields ===
=== Special fields ===
{|
{|
!policy name
!System name
!explantion
!Display name
!extra info
!Explantion
!Extra info
|-
|-
|'''allowMultilookupInLists'''
|'''allowMultilookupInLists'''
Allow multilookup in list views
|Allow multilookup in list views
|Minor performance impact
|Minor performance impact
|
|
Line 1,342: Line 1,347:


|'''allowRecursiveDelete'''
|'''allowRecursiveDelete'''
Allow recursive record deletion
|Allow recursive record deletion
|Allow deletion of parent items to propagate (configure each solution)
|Allow deletion of parent items to propagate (configure each solution)
|
|
Line 1,348: Line 1,353:


|'''allowRelationDuringCreation'''
|'''allowRelationDuringCreation'''
Create related records before save
|Create related records before save
|Allow users to create new child records before the parent is submitted / created.
|Allow users to create new child records before the parent is submitted / created.
|
|
Line 1,354: Line 1,359:


|'''doSmartDateInput'''
|'''doSmartDateInput'''
Smart sate input
|Smart sate input
|Use relative date inputs (example: -1 = yesterday)
|Use relative date inputs (example: -1 = yesterday)
|[[Policy/doSmartDateInput]]
|[[Policy/doSmartDateInput]]
Line 1,360: Line 1,365:


|'''lookupCheckKeysAllways'''
|'''lookupCheckKeysAllways'''
Lookup allways check key values
|Lookup allways check key values
|
|
|
|
Line 1,366: Line 1,371:


|'''lookupIgnoreErrors'''
|'''lookupIgnoreErrors'''
Lookup ignore errors
|Lookup ignore errors
|
|
|
|
Line 1,372: Line 1,377:


|'''lookupIgnoreErrorsAjax'''
|'''lookupIgnoreErrorsAjax'''
Lookup ignore AJAX errors
|Lookup ignore AJAX errors
|
|
|
|
Line 1,378: Line 1,383:


|'''lookupRecordSingleItemChange'''
|'''lookupRecordSingleItemChange'''
Display 1 record in lookup list changes
|Display 1 record in lookup list changes
|Lookup list elements will only display 1 reference after being set the first time
|Lookup list elements will only display 1 reference after being set the first time
|
|
Line 1,384: Line 1,389:


|'''medicoCloakPersonUniqueID'''
|'''medicoCloakPersonUniqueID'''
Cloak person identification data (ex. CPR)
|Cloak person identification data (ex. CPR)
|Partially hide sensitive information when not in ITEM edit mode. Example 112233-4455 becomes 112233-XXXX.
|Partially hide sensitive information when not in ITEM edit mode. Example 112233-4455 becomes 112233-XXXX.
|
|
Line 1,390: Line 1,395:


|'''questionaireAutostart'''
|'''questionaireAutostart'''
Questionaire autostart
|Questionaire autostart
|Make sure the user cannot navigate to anything else that the first question
|Make sure the user cannot navigate to anything else that the first question
|
|
Line 1,396: Line 1,401:


|'''questionaireLastButton'''
|'''questionaireLastButton'''
Last button in questionaires
|Last button in questionaires
|Display a button to navigate to questionaires final page
|Display a button to navigate to questionaires final page
|
|
Line 1,402: Line 1,407:


|'''questionaireLastResume'''
|'''questionaireLastResume'''
Questionaire missing field summary
|Questionaire missing field summary
|Display missing fields on final page
|Display missing fields on final page
|
|
Line 1,408: Line 1,413:


|'''questionaireProgress'''
|'''questionaireProgress'''
Questionaire progress
|Questionaire progress
|Turns progress indication (bar/percentage/steps) on and off
|Turns progress indication (bar/percentage/steps) on and off
|
|
Line 1,414: Line 1,419:


|'''questionaireProgressIcons'''
|'''questionaireProgressIcons'''
Questionaire progress: Bar
|Questionaire progress: Bar
|Display blue/grey arrows based on progress
|Display blue/grey arrows based on progress
|
|
Line 1,420: Line 1,425:


|'''questionaireProgressPercent'''
|'''questionaireProgressPercent'''
Questionaire progress: Percentage
|Questionaire progress: Percentage
|Calculate the completion rate based on progress
|Calculate the completion rate based on progress
|
|
Line 1,426: Line 1,431:


|'''questionaireProgressSteps'''
|'''questionaireProgressSteps'''
Questionaire progress: Steps
|Questionaire progress: Steps
|Display number of completed and leftover questions
|Display number of completed and leftover questions
|
|
Line 1,434: Line 1,439:
=== Designer ===
=== Designer ===
{|
{|
!policy name
!System name
!explantion
!Display name
!extra info
!Explantion
!Extra info
|-
|-
|'''deletionBackup'''
|'''deletionBackup'''
Deletion backups
|Deletion backups
|Perform backups before deleting solutions / fields
|Perform backups before deleting solutions / fields
|
|
Line 1,445: Line 1,451:


|'''deletionBackupDefinition'''
|'''deletionBackupDefinition'''
Deletion copy definition
|Deletion copy definition
|Copy metadata of solution before deletion
|Copy metadata of solution before deletion
|
|
Line 1,451: Line 1,457:


|'''deletionBackupRecordLimit'''
|'''deletionBackupRecordLimit'''
Deletion backup record limit
|Deletion backup record limit
|Maximum number of records before tables are backup up before deletion
|Maximum number of records before tables are backup up before deletion
|
|
Line 1,457: Line 1,463:


|'''designerDisplayHelp'''
|'''designerDisplayHelp'''
Display help section in designer (this menu)
|Display help section in designer (this menu)
|
|
|
|
|-
|-
|}
|}


=== Layout ===
=== Layout ===
{|
{|
!policy name
!System name
!explantion
!Display name
!extra info
!Explantion
!Extra info
|-
|-




|'''cssStylesheetBasic'''
|'''cssStylesheetBasic'''
Include Basic stylesheet
|Include Basic stylesheet
|Disable if you want 100% style control
|Disable if you want 100% style control
|
|
Line 1,479: Line 1,485:


|'''cssStylesheetJQuery'''
|'''cssStylesheetJQuery'''
Include JQuery stylesheet
|Include JQuery stylesheet
|Disable if you want 100% style control
|Disable if you want 100% style control
|
|
Line 1,486: Line 1,492:


|'''diagramLargeHeight'''
|'''diagramLargeHeight'''
Diagram height large
|Diagram height large
|Ex. Runchart details
|Ex. Runchart details
|
|
Line 1,492: Line 1,498:


|'''diagramLargeWidth'''
|'''diagramLargeWidth'''
Diagram width large
|Diagram width large
|Ex. Runchart details
|Ex. Runchart details
|
|
Line 1,498: Line 1,504:


|'''diagramSmallHeight'''
|'''diagramSmallHeight'''
Diagram height small
|Diagram height small
|Ex. Runchart overview
|Ex. Runchart overview
|
|
Line 1,504: Line 1,510:


|'''diagramSmallWidth'''
|'''diagramSmallWidth'''
Diagram width small
|Diagram width small
|Ex. Runchart overview
|Ex. Runchart overview
|
|
Line 1,510: Line 1,516:


|'''renderListGroupColumns'''
|'''renderListGroupColumns'''
Use grouping columns
|Use grouping columns
|Group column i moved to the first in the list
|Group column i moved to the first in the list
|
|
Line 1,516: Line 1,522:


|'''renderListGroupHeaders'''
|'''renderListGroupHeaders'''
Use grouping headers
|Use grouping headers
|Alternative: Group values displayed as column
|Alternative: Group values displayed as column
|
|
Line 1,522: Line 1,528:


|'''renderListSortColumns'''
|'''renderListSortColumns'''
Use sorting columns
|Use sorting columns
|Sort column i moved to the first in the list
|Sort column i moved to the first in the list
|
|
Line 1,528: Line 1,534:


|'''standardHeightMemo'''
|'''standardHeightMemo'''
Standard textarea Height
|Standard textarea Height
|Default height of TEXTAREA. Value can be overloaded in each field configuration.
|Default height of TEXTAREA. Value can be overloaded in each field configuration.
|
|
Line 1,534: Line 1,540:


|'''standardTextCropLength'''
|'''standardTextCropLength'''
Text default crop length
|Text default crop length
|
|
|
|
Line 1,540: Line 1,546:


|'''standardWidthHeader'''
|'''standardWidthHeader'''
Header standard width
|Header standard width
|
|
|
|
Line 1,546: Line 1,552:


|'''standardWidthMemo'''
|'''standardWidthMemo'''
Standard textarea Width
|Standard textarea Width
|Default width of TEXTAREA. Value can be overloaded in each field configuration.
|Default width of TEXTAREA. Value can be overloaded in each field configuration.
|
|
Line 1,552: Line 1,558:


|'''standardWidthText'''
|'''standardWidthText'''
Standard inputbox size
|Standard inputbox size
|Standard INPUT field size. Value can be overloaded in each field configuration.
|Standard INPUT field size. Value can be overloaded in each field configuration.
|
|
Line 1,558: Line 1,564:


|'''windowDefaultHeight'''
|'''windowDefaultHeight'''
New window height (pixels)
|New window height (pixels)
|Standard height for IFRAME and popup windows
|Standard height for IFRAME and popup windows
|
|
Line 1,564: Line 1,570:


|'''windowDefaultWidth'''
|'''windowDefaultWidth'''
New window width (pixels)
|New window width (pixels)
|Standard width for IFRAME and popup windows
|Standard width for IFRAME and popup windows
|
|
Line 1,572: Line 1,578:
=== Rendering ===
=== Rendering ===
{|
{|
!policy name
!System name
!explantion
!Display name
!extra info
!Explantion
!Extra info
|-
|-
|'''defaultHtmlDoctype'''
|'''defaultHtmlDoctype'''
HTML DOCTYPE
|HTML DOCTYPE
|First line of HTML response. Change if you need specific HTML compliance. System is natively xhtml 1.0 compliant.
|First line of HTML response. Change if you need specific HTML compliance. System is natively xhtml 1.0 compliant.
|
|
Line 1,583: Line 1,590:


|'''defaultHtmlEncoding'''
|'''defaultHtmlEncoding'''
General encoding for server
|General encoding for server
|Codepage displayed inside the html tag
|Codepage displayed inside the html tag
|
|
Line 1,589: Line 1,596:


|'''defaultHtmlVersion'''
|'''defaultHtmlVersion'''
HTML version number
|HTML version number
|Version information displayed inside the html tag
|Version information displayed inside the html tag
|
|
Line 1,595: Line 1,602:


|'''doIncludeJQuery'''
|'''doIncludeJQuery'''
Include JQuery library
|Include JQuery library
|Include JQuery in compability mode
|Include JQuery in compability mode
|
|
Line 1,601: Line 1,608:


|'''doPageSelectViaJquery'''
|'''doPageSelectViaJquery'''
Page selectors via JQuery
|Page selectors via JQuery
|Use JS components for page selectors (default: static html)
|Use JS components for page selectors (default: static html)
|
|
Line 1,607: Line 1,614:


|'''doIncludeScriptUserInfo'''
|'''doIncludeScriptUserInfo'''
Insert user info JS variables
|Insert user info JS variables
|Inject user information in pages for use with custom JavaScripts
|Inject user information in pages for use with custom JavaScripts
|
|
Line 1,613: Line 1,620:


|'''heatmapCellColorIcon'''
|'''heatmapCellColorIcon'''
Heatmap cell icon
|Heatmap cell icon
|Special content inserted into all heatmap cells
|Special content inserted into all heatmap cells
|
|Moved to buttons/style in version 8945
|-
|-


|'''heatmapInvertAxis'''
|'''heatmapInvertAxis'''
Heatmap invert axis
|Heatmap invert axis
|Display variables on Y axis and records on X axis
|Display variables on Y axis and records on X axis
|
|
Line 1,625: Line 1,632:


|'''heatmapItemLinks'''
|'''heatmapItemLinks'''
Heatmap links to items
|Heatmap links to items
|Allow direct links from heatmap records
|Allow direct links from heatmap records
|
|
Line 1,631: Line 1,638:


|'''heatmapLegendMap'''
|'''heatmapLegendMap'''
Heatmap legend
|Heatmap legend
|Display legend map of full variable names  
|Display legend map of full variable names  
|
|
Line 1,637: Line 1,644:


|'''pageselectorTableLayout'''
|'''pageselectorTableLayout'''
Pageselector in tables
|Pageselector in tables
|Render pagesselectors as tables (normal = div)
|Render pagesselectors as tables (normal = div)
|
|
Line 1,643: Line 1,650:


|'''renderLinksCompliant'''
|'''renderLinksCompliant'''
Render links HTML 4.0 compliant
|Render links HTML 4.0 compliant
|Encode links to satisfy HTML4 specification
|Encode links to satisfy HTML4 specification
|
|
Line 1,649: Line 1,656:


|'''useGoogleChart'''
|'''useGoogleChart'''
Technology diagram: Google
|Technology diagram: Google
|Alternative use JQPlot (recommended)
|Alternative use ChartJS (not recommended any more)
|
|
|-
|'''useNewChart'''
|Beta: Use new chart implementation
|
|[[Dashboard diagram widget configuration]]
|-
|'''diagramChartJSColors'''
|Colors for charts
|Set the colors used by ChartJS
|[[Dashboard diagram widget configuration]]
|-
|-


|'''useScriptulous'''
|'''useScriptulous'''
Technology script: Scriptulous
|Technology script: Scriptulous
|Alternative use JQuery (recommended)
|Alternative use JQuery (recommended)
|
|
Line 1,663: Line 1,680:
=== Staging ===
=== Staging ===
{|
{|
!policy name
!System name
!explantion
!Display name
!extra info
!Explantion
!Extra info
|-
|-
|'''buildTestLinesDefault'''
|'''buildTestLinesDefault'''
Build test data default size
|Build test data default size
|Amount of lines copied from live system when building sets of test data
|Amount of lines copied from live system when building sets of test data
|
|
Line 1,674: Line 1,692:


|'''testSessionBackground'''
|'''testSessionBackground'''
Testsession use background
|Testsession use background
|Markup when in test mode:. Set background image with this URL.
|Markup when in test mode:. Set background image with this URL.
|
|
Line 1,680: Line 1,698:


|'''testSessionInlineText'''
|'''testSessionInlineText'''
Testsession page information
|Testsession page information
|Markup when in test mode:. Put extra HTML specified in page.
|Markup when in test mode:. Put extra HTML specified in page.
|
|
Line 1,686: Line 1,704:


|'''testSessionTitleChange'''
|'''testSessionTitleChange'''
Testsession use title
|Testsession use title
|Markup when in test mode:. Set browser title to this text.
|Markup when in test mode:. Set browser title to this text.
|
|
|-
|-
|}
|}


=== Codeunit ===
=== Codeunit ===
{|
{|
!policy name
!System name
!explantion
!Display name
!extra info
!Explantion
!Extra info
|-
|-
|'''codeunitLoadExternal'''
|'''codeunitLoadExternal'''
Load external codeunits
|Load external codeunits
|Allow server to load JAR files outside webapplication WEB-INF folder
|Allow server to load JAR files outside webapplication WEB-INF folder
|
|
Line 1,706: Line 1,724:


|'''codeunitPathJarFile'''
|'''codeunitPathJarFile'''
Filesystem folder for codeunits
|Filesystem folder for codeunits
|Folder that is considered safe to use for built-in class loader
|Folder that is considered safe to use for built-in class loader
|
|
Line 1,712: Line 1,730:


|'''codeunitPathJarLink'''
|'''codeunitPathJarLink'''
Http URL folder for codunits
|Http URL folder for coedunits
|URL that is considered safe to use for built-in class loader
|URL that is considered safe to use for built-in class loader
|
|
Line 1,718: Line 1,736:


|'''safeCreateAddGroup1'''
|'''safeCreateAddGroup1'''
Fullauto: Add group A
|Fullauto: Add group A
|Option for full auto user/exclusivegroup creation
|Option for full auto user/exclusivegroup creation
|
|
Line 1,724: Line 1,742:


|'''safeCreateAddGroup2'''
|'''safeCreateAddGroup2'''
Fullauto: Add group B
|Fullauto: Add group B
|Option for full auto user/exclusivegroup creation
|Option for full auto user/exclusivegroup creation
|
|
Line 1,730: Line 1,748:


|'''safeCreateIsDatahandler'''
|'''safeCreateIsDatahandler'''
Fullauto: Assign DataHandler role
|Fullauto: Assign DataHandler role
|Option for full auto user/exclusivegroup creation
|Option for full auto user/exclusivegroup creation
|
|
Line 1,736: Line 1,754:


|'''safeCreateIsUserCreator'''
|'''safeCreateIsUserCreator'''
Fullauto: Assign UserCreator role
|Fullauto: Assign UserCreator role
|Option for full auto user/exclusivegroup creation
|Option for full auto user/exclusivegroup creation
|
|
|-
|-
|}
|}


=== Language / I18N ===
=== Language / I18N ===
{|
{|
!policy name
!System name
!explantion
!Display name
!extra info
!Explantion
!Extra info
|-
|-
|'''languageGetFromBrowser'''
|'''languageGetFromBrowser'''
Determine langauge from browser
|Determine langauge from browser
|Pick up language settings from the browsers settings
|Pick up language settings from the browsers settings
|
|
Line 1,756: Line 1,774:


|'''languageUseI18N'''
|'''languageUseI18N'''
Use Internationalization
|Use Internationalization
|Allow solutions to take advantage of I18N. Configure each solution seperately.
|Allow solutions to take advantage of I18N. Configure each solution seperately.
|
|
|-
|-
|}
|}


=== OLAP cubes ===
=== OLAP cubes ===
{|
{|
!policy name
!System name
!explantion
!Display name
!extra info
!Explantion
!Extra info
|-
|-
|'''olapDateDimensionYearEnd'''
|'''olapDateDimensionYearEnd'''
OLAP Time dimension last year
|OLAP Time dimension last year
|
|
|
|
Line 1,776: Line 1,794:


|'''olapDateDimensionYearStart'''
|'''olapDateDimensionYearStart'''
OLAP Time dimension first year
|OLAP Time dimension first year
|
|
|
|
Line 1,782: Line 1,800:


|'''olapEngineFolderURL'''
|'''olapEngineFolderURL'''
OLAP engine URL (optional)
|OLAP engine URL (optional)
|
|
|
|
Line 1,788: Line 1,806:


|'''olapRebuildOnBoot'''
|'''olapRebuildOnBoot'''
Rebuild OLAP on boot
|Rebuild OLAP on boot
|Rewrite cube defintions and queries
|Rewrite cube defintions and queries
|
|
Line 1,794: Line 1,812:


|'''olapUseSingleSignon'''
|'''olapUseSingleSignon'''
OLAP Single Sign On
|OLAP Single Sign On
|Allow external users with security tokens (set OLAP folder to use dedicated server)
|Allow external users with security tokens (set OLAP folder to use dedicated server)
|
|
Line 1,800: Line 1,818:


|'''allowRemoteOlapSchema'''
|'''allowRemoteOlapSchema'''
OLAP schema service
|OLAP schema service
|Activate schema delivery service (remote OLAP servers)
|Activate schema delivery service (remote OLAP servers)
|
|
Line 1,806: Line 1,824:


|'''olapSchemaPassword'''
|'''olapSchemaPassword'''
OLAP schema service password
|OLAP schema service password
|Experimental: Password for use with the schema delivery service (remote OLAP servers)
|Experimental: Password for use with the schema delivery service (remote OLAP servers)
|
|
Line 1,813: Line 1,831:


|'''olapJPivotEnabled'''
|'''olapJPivotEnabled'''
JPivot OLAP enabled
|JPivot OLAP enabled
|Is the internal OLAP engine enabled (JPivot)
|Is the internal OLAP engine enabled (JPivot)
|
|
Line 1,819: Line 1,837:


|'''olapJpivotIncludeDefaultCubes'''
|'''olapJpivotIncludeDefaultCubes'''
Jpivot schema include default cubes
|Jpivot schema include default cubes
|Include autogenerated cubes with generated permissions
|Include autogenerated cubes with generated permissions
|
|
Line 1,825: Line 1,843:


|'''olapSaikuEnabled'''
|'''olapSaikuEnabled'''
Saiku OLAP enabled
|Saiku OLAP enabled
|Experimental: Is the external OLAP engine enabled (saiku)
|Experimental: Is the external OLAP engine enabled (saiku)
|
|
Line 1,831: Line 1,849:


|'''olapSaikuIncludeCustomCubes'''
|'''olapSaikuIncludeCustomCubes'''
Saiku schema include custom cubes
|Saiku schema include custom cubes
|Include custom cubes with default permissions
|Include custom cubes with default permissions
|
|
Line 1,838: Line 1,856:


|'''olapSaikuSettingWebapp'''
|'''olapSaikuSettingWebapp'''
Optional saiku web application name
|Optional saiku web application name
|Default if value is left empty: <current webapp name> + "Saiku"
|Default if value is left empty: <current webapp name> + "Saiku"
|Example: /SaikuWebapp
|Example: /SaikuWebapp
Line 1,844: Line 1,862:


|'''olapSaikuSettingServerUrl'''
|'''olapSaikuSettingServerUrl'''
Optional saiku server URL
|Optional saiku server URL
|Default if value is left empty: <same server>
|Default if value is left empty: <same server>
|Example: http://myserver.com
|Example: <nowiki>http://myserver.com</nowiki>
|-
|-


Line 1,853: Line 1,871:
=== REST webservice ===
=== REST webservice ===
{|
{|
!policy name
!System name
!explantion
!Display name
!extra info
!Explantion
!Extra info
|-
|-
|'''restActive'''
|'''restActive'''
REST is activated
|REST is activated
|Option: Disable in web.xml
|Option: Disable in web.xml
|
|
Line 1,864: Line 1,883:


|'''restAllowAnonoumous'''
|'''restAllowAnonoumous'''
Annonumous REST sessions
|Annonumous REST sessions
|Webuser can interact if given permission
|Webuser can interact if given permission
|
|
Line 1,870: Line 1,889:


|'''restAllowAnonoumousSchema'''
|'''restAllowAnonoumousSchema'''
Annonumous REST metadata
|Annonumous REST metadata
|Webuser can interact if given permission
|Webuser can interact if given permission
|
|
Line 1,876: Line 1,895:


|'''restListPageSize'''
|'''restListPageSize'''
REST list service page length
|REST list service page length
|Maximum mnuber of items displayed in a search
|Maximum mnuber of items displayed in a search
|
|
Line 1,882: Line 1,901:


|'''restStrongTypeRequest'''
|'''restStrongTypeRequest'''
Strong types REST requests
|Strong types REST requests
|Use strong types in WADL
|Use strong types in WADL
|
|
Line 1,888: Line 1,907:


|'''restStrongTypeResponse'''
|'''restStrongTypeResponse'''
Strong types REST response
|Strong types REST response
|Use strong types in XSD
|Use strong types in XSD
|
|
|-
|-
|}
|}


=== Password policy ===
=== Password policy ===
{|
{|
!policy name
!System name
!explantion
!Display name
!extra info
!Explantion
!Extra info
|-
|-
|'''passwordExpiry'''
|'''passwordExpiry'''
Password Expiry
|Password Expiry
|Allow passwords to expire according to value set in passwordExpiryAge
|Allow passwords to expire according to value set in passwordExpiryAge
|
|
Line 1,908: Line 1,927:


|'''passwordExpiryAge'''
|'''passwordExpiryAge'''
Password Expiry age
|Password Expiry age
|Maximum age of passwords
|Maximum age of passwords
|
|
|-
|-


|'''passwordExpiryWarning'''
|'''passwordExpiryWarning'''  
Days to warn for password exipry  
|Days to warn for password exipry
|Dars to start warning the user about their password expirng, as defined by passwordExpiryAge
|Dars to start warning the user about their password expirng, as defined by passwordExpiryAge
|
|
Line 1,920: Line 1,939:


|'''passwordReqCheckOnLogon'''
|'''passwordReqCheckOnLogon'''
Password check rules OnLogon
|Password check rules OnLogon
|Enforce password rules on all logons
|Enforce password rules on all logons
|
|
Line 1,926: Line 1,945:


|'''passwordRequireLength'''
|'''passwordRequireLength'''
Password require length
|Password require length
|Minimum total length of password
|Minimum total length of password
|
|
Line 1,932: Line 1,951:


|'''passwordRequireLowercase'''
|'''passwordRequireLowercase'''
Password require Lowercase
|Password require Lowercase
|Content rule lowercase letters (ex. abc)
|Content rule lowercase letters (ex. abc)
|
|
Line 1,938: Line 1,957:


|'''passwordRequirements'''
|'''passwordRequirements'''
Password requirements
|Password requirements
|Enforce password rules
|Enforce password rules
|
|
Line 1,944: Line 1,963:


|'''passwordRequireNumbers'''
|'''passwordRequireNumbers'''
Password require Numbers
|Password require Numbers
|Content rule numbers (ex. 123)
|Content rule numbers (ex. 123)
|
|
Line 1,950: Line 1,969:


|'''passwordRequireSpecial'''
|'''passwordRequireSpecial'''
Password require Special
|Password require Special
|Content rule special characters (ex. !#%&)
|Content rule special characters (ex. !#%&)
|
|
Line 1,956: Line 1,975:


|'''passwordRequireUppercase'''
|'''passwordRequireUppercase'''
Password require Uppercase
|Password require Uppercase
|Content rule uppercase letters (ex. ABC)
|Content rule uppercase letters (ex. ABC)
|
|
|-
|-
|}
|}


=== Statistics ===
=== Statistics ===
{|
{|
!policy name
!System name
!explantion
!Display name
!extra info
!Explantion
!Extra info
|-
|-
|'''statisticsRegressionInfo'''
|'''statisticsRegressionInfo'''
Extra regression info
|Extra regression info
|Display advanvced regression correllation information
|Display advanvced regression correllation information
|
|
Line 1,976: Line 1,995:


|'''statisticsTargetPValue'''
|'''statisticsTargetPValue'''
Target p-value for tests
|Target p-value for tests
|At what p-values are tests considered significant
|At what p-values are tests considered significant
|
|
|-
|-
|}
|}


=== Satelite server handling ===
=== Satelite server handling ===
{|
{|
!policy name
!System name
!explantion
!Display name
!extra info
!Explantion
!Extra info
|-
|-


|'''serverSateliteMaster'''
|'''serverSateliteMaster'''
Master: Server is MASTER
|Master: Server is MASTER
|The master server controls the satelite, and contains ALL data
|The master server controls the satelite, and contains ALL data
|
|
Line 1,997: Line 2,016:


|'''sateliteDatabaseHost'''
|'''sateliteDatabaseHost'''
Master: Satelite DB hostname
|Master: Satelite DB hostname
|Connection information for satelite database (requires R/W access)
|Connection information for satelite database (requires R/W access)
|
|
Line 2,003: Line 2,022:


|'''sateliteDatabaseJDBC'''
|'''sateliteDatabaseJDBC'''
Master: Satelite DB database
|Master: Satelite DB database
|Connection information for satelite database (requires R/W access)
|Connection information for satelite database (requires R/W access)
|
|
Line 2,009: Line 2,028:


|'''sateliteDatabaseUser'''
|'''sateliteDatabaseUser'''
Master: Satelite DB username
|Master: Satelite DB username
|Connection information for satelite database (requires R/W access)
|Connection information for satelite database (requires R/W access)
|
|
Line 2,015: Line 2,034:


|'''sateliteDatabasePass'''
|'''sateliteDatabasePass'''
Master: Satelite DB password
|Master: Satelite DB password
|Connection information for satelite database (requires R/W access)
|Connection information for satelite database (requires R/W access)
|
|
Line 2,021: Line 2,040:


|'''serverSateliteSlave'''
|'''serverSateliteSlave'''
Satelite: Server is SATELITE
|Satelite: Server is SATELITE
|Warning: The satelite is controlled by the master server, and contains a SUBSET of data
|Warning: The satelite is controlled by the master server, and contains a SUBSET of data
|
|
Line 2,027: Line 2,046:


|'''allowRemoteCacheReset'''
|'''allowRemoteCacheReset'''
Satelite: Cache reset allowed via URL
|Satelite: Cache reset allowed via URL
|Allow anonoumous cache reset using only password
|Allow anonoumous cache reset using only password
|
|
Line 2,033: Line 2,052:


|'''cacheResetNowPassword'''
|'''cacheResetNowPassword'''
Satelite: Cache reset password
|Satelite: Cache reset password
|Password to include in the URL for the cache reset
|Password to include in the URL for the cache reset
|
|
Line 2,043: Line 2,062:


{|
{|
!policy name
!System name
!explantion
!Display name
!extra info
!Explantion
!Extra info
|-
|-


|'''ftpDbConnection'''
|'''ftpDbConnection'''
CrushFTP database Connection
|CrushFTP database Connection
|Connection string for CrushFTP authorization database. Example: ''jdbc:mysql://127.0.0.1/crushftp''
|Connection string for CrushFTP authorization database. Example: ''jdbc:mysql://127.0.0.1/crushftp''
|
|
Line 2,055: Line 2,075:


|'''ftpDbUsername'''
|'''ftpDbUsername'''
CrushFTP database Username
|CrushFTP database Username
|Username CrushFTP database
|Username CrushFTP database
|
|
Line 2,061: Line 2,081:


|'''ftpDbPassword'''
|'''ftpDbPassword'''
CrushFTP database Password
|CrushFTP database Password
|Password CrushFTP database
|Password CrushFTP database
|
|
Line 2,067: Line 2,087:


|'''ftpServerPortFtp'''
|'''ftpServerPortFtp'''
CrushFTP port for FTP
|CrushFTP port for FTP
|Default 21
|Default 21
|
|
Line 2,073: Line 2,093:


|'''ftpServerPortHttp'''
|'''ftpServerPortHttp'''
CrushFTP port for HTTP
|CrushFTP port for HTTP
|Default 8081 for side by side installation
|Default 8081 for side by side installation
|
|
Line 2,079: Line 2,099:


|}
|}


=== Menu customization ===
=== Menu customization ===


{|
{|
!policy name
!System name
!explantion
!Display name
!extra info
!Explantion
!Extra info
|-
|-


| '''menuLayoutDefault'''
| '''menuLayoutDefault'''
Menu default layout name
|Menu default layout name
| Choose between: layoutClassic layoutRibbon layoutBlockLeft layoutBlockRight
| Choose between: layoutClassic layoutRibbon layoutBlockLeft layoutBlockRight
|
|
Line 2,098: Line 2,117:


| '''menuLayoutSelector'''
| '''menuLayoutSelector'''
Allow user to select menu layout
|Allow user to select menu layout
| Layout position selectors will displayed in the main menu
| Layout position selectors will displayed in the main menu
|
|
Line 2,104: Line 2,123:


| '''menuLevelAdvancedDefault'''
| '''menuLevelAdvancedDefault'''
Menu default advanced
|Menu default advanced
| Display all menu items by default
| Display all menu items by default
|
|
Line 2,110: Line 2,129:


| '''menuLevelSelector'''
| '''menuLevelSelector'''
Allow user to select menu level
|Allow user to select menu level
| Simple / advanced selectors will displayed in the main menu
| Simple / advanced selectors will displayed in the main menu
|
|
Line 2,117: Line 2,136:
|}
|}


=== WebDAV (BETA) ===
=== WebDAV ===


{|
{|
!policy name
!System name
!explantion
!Display name
!extra info
!Explantion
!Extra info
|-
|-
| '''webdavMapDriveInMenu'''
| '''webdavMapDriveInMenu'''
Map drive button
|Map drive button
| Add map network drive button in main menu
| Add map network drive button in main menu
|
|
|-
|-
| '''webdavSessionLifetime'''
| '''webdavSessionLifetime'''
Session token lifetime
|Session token lifetime
| Age before session tokens expire
| Age before session tokens expire
|
|
|-
|-
| '''webdavSessionTokens'''
| '''webdavSessionTokens'''
Session token
|Session token
| Session tokens allows direct editing from UI with doing authentication again
| Session tokens allows direct editing from UI with doing authentication again
|
|
|-
|-
| '''webdavSessionTokensRevalidate'''
| '''webdavSessionTokensRevalidate'''
Session token revalidate
|Session token revalidate
| Allow user to do basic authentication if a token expires or gets deregistered
| Allow user to do basic authentication if a token expires or gets deregistered
|
|
|-
|-
| '''webdavSupport'''
| '''webdavSupport'''
Allow WebDAV
|Allow WebDAV
| Activate WebDAV for files stored i solution records
| Activate WebDAV for files stored i solution records
|
|
|-
|-
|}
|}


=== Single Sign On (BETA) ===
=== Single Sign On ===


{|
{|
!policy name
!System name
!explantion
!Display name
!extra info
!Explantion
!Extra info
|-
|-


| '''oauthLoginDisplay'''
| '''oauthLoginDisplay'''
SSO from login page
|SSO from login page
| Display SSO links on login page
| Display SSO links on login page
|
|
|-
|-


| '''oauthFacebookAllow'''
| '''oauthFacebookAllow'''
Facebook SSO active
|Facebook SSO active
|
|
|
|
|-
|-
| '''oauthFacebookClient'''
| '''oauthFacebookClient'''
Facebook API username
|Facebook API username
| https://developers.facebook.com/apps/
| https://developers.facebook.com/apps/
|
|
|-
|-
| '''oauthFacebookSecret'''
| '''oauthFacebookSecret'''
Facebook API password
|Facebook API password
| https://developers.facebook.com/apps/
| https://developers.facebook.com/apps/
|
|
|-
|-
| '''oauthGoogleAllow'''
| '''oauthGoogleAllow'''
Google SSO active
|Google SSO active
|
|
|
|
|-
|-
| '''oauthGoogleClient'''
| '''oauthGoogleClient'''
Google API username
|Google API username
| https://developer.linkedin.com/documents/authentication
| https://developer.linkedin.com/documents/authentication
|
|
|-
|-
| '''oauthGoogleSecret'''
| '''oauthGoogleSecret'''
Google API password
|Google API password
| https://developer.linkedin.com/documents/authentication
| https://developer.linkedin.com/documents/authentication
|
|
|-
|-
| '''oauthLinkedinAllow'''
| '''oauthLinkedinAllow'''
LinkedIn SSO active
|LinkedIn SSO active
|
|
|
|
|-
|-
| '''oauthLinkedinClient'''
| '''oauthLinkedinClient'''
LinkedIn API username
|LinkedIn API username
| https://console.developers.google.com/project/ts-oauth2-v1000/apiui/credential?clientType
| https://console.developers.google.com/project/ts-oauth2-v1000/apiui/credential?clientType
|
|
|-
|-
| '''oauthLinkedinSecret'''
| '''oauthLinkedinSecret'''
LinkedIn API password
|LinkedIn API password
| https://console.developers.google.com/project/ts-oauth2-v1000/apiui/credential?clientType
| https://console.developers.google.com/project/ts-oauth2-v1000/apiui/credential?clientType
|
|
|-
|-


|}
|}

Latest revision as of 10:57, 24 April 2024

Policies are shared between all solutions in each Tempus Serva installation. Note that each property can be overloaded in the Servlet context (same file as the connection pool configuration).

Note: In the following sections only links in the color blue will contain additional information.

Server configuration

System name Display name Explantion Extra info
applicationBasePath Application folder Location of WAR / deployed web application
applicationDisplayName Application display name Name of application displayed to users
applicationlPort Server port for HTTP Port used running regular requests. Needs to match the setting in webcontainer definition (server.xm in Tomcat)l
applicationlPortSSL Server port for HTTPS Port used running SSL encrypted requests. Needs to match the setting in webcontainer definition (server.xm in Tomcat)l
applicationName Application name Name of application / folder - example http://myserver.com/APPLICATIONNAME/login
applicationServer Application server hostname or IP Base refernce for the server. IP example: 89.56.12.14. Network name: localhost. Domain: bpms.acme.com
applicationURL Application machine / URL Base URL of the server as seen by the end user. Overlaps with value in applicationServer
cacheActive Caching enabled (recommended) Enable caching of system ressources. Alternative: Collect all ressources every time (very slow)
cacheBrowserExpireSeconds Static content cache time (seconds) Amount of time that images and scripts are cached i client browser.
cacheMaxObjectSize Cache maximum size (bytes) Maximum amount of memory consumed by the cache. Set as high as possible.
connectionPoolActive Use connection pools (recommended) Strongly recommended. Use webcontainer connection pools. Alternative: Application builds own connections (very slow)
defaultCharEncoding Default Character Encoding Recommended: ISO-8859
doExtraUrlDecoding Decode autocompletion / quicksearch Use if experiencing problems with autocompletion / quicksearch
doRedirectAfterUpdate Redirect user after updates Strongly recommended. Slight performance hit, but enables browser BACK button
multiServerCoordination Server cluster coordination Coordinate cache flushing, user list etc. through database communication (polling).
serverTypeAutodetect Server type detection Autodetect compliance type
serverTypeJ2EE Server type J2EE Compliance type if autodetect is disabled
sessionCheckInterval Session cleanup interval (minutes) Time between online list sweeping, removing user with no recent activity.
sessionLifetimeMaximum Session lifetime (minutes) Maximum time before last activity before users must log in again
sessionLifetimeMinutes Session lifetime minutes Length of user sessions (changeable at runtime)
systemOptimizeMemory Minimize HEAP size Always recommended < 1Gb RAM. Tradeoff between RAM and CPU time

Interface behaviour

System name Display name Explantion Extra info
allowAliasQueryParameters Allow Query alias parameters Allow alternate names for parameters used in LIST searches. Alternate names can be set programmtically.
allowFieldSelectionInLists Allow field selection in lists Allow user to select which fields are displayed in LIST views
allowListQuickFilter Allow for Quick filters i list views Enable serach in lists by writing part of the name (a search box will appear)
allowListSubtableRendering Data subtables in lists Subtables can negatively affect performance
allowSubtableLists Allow subtables in items (recommended) Allow related child records to be displayed in ITEM level views
concurrencyWarnings Warn on simultanous item editing Users poll server for changes using AJAX in browser client (some performance impact). Note that only different users editing the same item will trigger a warning.
defaultLanguageID Default Language (ID) Language to use if nothing else is specified and autodetection is disabled. Test by adding &Language=[number] to URL
defaultStyleID Default Style (ID) Style (buttons) to use if nothing else is specified. Test by adding &Style=[number] to URL
defaultStylesheetID Default Stylesheet (ID) Stylesheet to use if nothing else is specified. Test by adding &Stylesheet=[number] to URL
defaultTemplateID Default Template (ID) Form template to use in ITEM mode if nothing else is specified. Test by adding &Template=[number] to URL
defaultWrapperID Default Wrapper (ID) WrapperID to use if nothing else is specified. Test by adding &Wrapper=[number] to URL
doFormAutosave Autosave changed forms Allow editor to autocommit data before session times out
doItemBrowserTitle Display item resume in browser title Change browser title/tab title to current records Resume value in ITEM mode
doItemCreateAddMore Button to add more records Add multiple records during new record creation (button)
doItemMenuCopyPaste Show copy/paste in during record edits Extra buttons for copy/paste operations in ITEM mode
DoLinkedCSS CSS style links Link CSS content so that browsers can cache the content. Recommended.
doListShowAllFields Allow show all fields button Optional button i menu for selecting all columns / fields in LIST mode
doListShowAllRecords Allow show all records in list view Optional button i menu for selecting all records in LIST mode
doListShowLinkHeader Display link in headers Display link to list as part of header name
doListShowNameHeader Display header in lists Display the name of the solution above the list
doListShowSearchHeader Show search headers Display descriptive header in search form
doPageNavigatorAllways Allways show navigator in lists Page navigator can be disabled if all records can displayed in one page
doPersonalFlagsOnItems Display user flags on items Allow users to make bookmark / personal comments on single items
doPersonalLinksOnItems Display personal links on single items Display submenu of personal options in ITEM mode. By default only displayed i list / main mode
doPersonalLinksOnLists Display personal links on lists Display submenu of personal options in LIST mode.
doRecentItemsBookmarks Show recent items list Trach and diaply recently accessed items.
doStatusFinalDisableEditing Disable editing if status is final Allow records to be edited even after the item has reached a status that is final
DoTimeDecimal Display date sums with decimals Is time measured on items displayed using decimal og integer values
errorAdvancedView Advanced error handling Display explanation and contact details if exceptions occur
errorUnkownImage Advanced error logo Logo to display i advanced error handling
guiClickableList Click/doubleclick lists List views can be clicked to edit (double) or show (single)
guiDialogAdvanced Use advanced popups Uses JQuery style dialog for poup windows with inline scrolling http://jqueryui.com/dialog/
guiFieldHelpOffsetLeft Field help popup offset LEFT Window relative position to link on X axis
guiFieldHelpOffsetTop Field help popup offset TOP Window relative position to link on Y axis
guiPreventDoubleClick Prevent doubleclick Deactivate multi click on codeunit buttons
guiSetFormFocus Set form focus Set focus to first element in edit mode
guiSmartKeystrokes Use keyboard navigation Navigate with arrow keys, escape and tabulation Features/Key navigation
guiTouchEnhancement Enhance touch experience Make larger buttons and enable quicksearch by default
headerSeperator Seperator sign for headers Dot between header parts - ex. MySolution - Dashboard
mainRedirect Main menu redirect active Redirect to alternative main menu active
mainRedirectUrl Main menu redirect URL Local path ex. main?command=list&SagID=0
renderMenuItemClass Use CSS class for menu items Give unique class property to each menu item.
subformLinesDefault Number of lines in subforms Default number of records displayed in subforms
toolBarcodeParameters Barcode additional parameters Extra parameter for barcode, for tweaking size, type etc.
userOnlineList Maintain list of online users Monitor users online - ie. users with an active session on the server. Recommended in single front server environments.
userRequireAcceptTerms Require new user to accept usage terms Configure text in System configurations

Active directory

System name Display name Explantion Extra info
ldapAuthentication Use LDAP authentication Is LDAP logon active ? Integration/LDAP
ldapAuthenticationFallback Use fallback authentication if LDAP fails Allow internal database verfication using stored passwords, in the event that the LDAP server fails to respond properly. Integration/LDAP
ldapCreateUsers Allow creation of new users Create users logging in, that cannot be found inside the LDAP. User must belong to ldapDomainDefault Integration/LDAP
ldapDomainDefault Default domain Integration/LDAP
ldapMaintainGroupsOnLogon Maintain groups on logon LDAP validation also synchronizes groups found for logged in user. Integration/LDAP
ldapServer LDAP setup: LDAP server Use IP or network name Integration/LDAP
ldapUsername LDAP setup: USERNAME Service account username. User needs only read access. Integration/LDAP
ldapPassword LDAP setup: PASSWORD Service account username. Note this password is stored cleartext. Integration/LDAP

Security

System name Display name Explantion Extra info
doAdvancedGroupSecurity Advanced group security Enables: A) Groups inside groups B) Multiple exclusive groups
policyHideValues Hide overloaded policies Hide values for policies that have been overloaded in the application deployment file
securityAllowPublicCodeunits Allow anonoumus codeunit execution It is considered safe to use special codeunits
securityEnforceExclusiveGroup Require normal users to have Exclusive groups All users except Admins must have at least 1 exclusive group
securityLoginFailedAttempts Login max failed logins Number of failed logins before accounts will be disabled
securityLoginFailedAutoReset AutoReset users Automatically reset users that have failed maximum number of logins (sends new password)
securityPasswordAcceptMD5digest Allow MD5 hashed passwords Recommended in transition between MD5 (minor flaws) and SHA256 (very secure)
securityPasswordCleartext Store passwords cleartext Allow passwords to be stored without one-way encryption
securityPasswordCleartextAllowed Allow cleartext passwords Optionally encode all password using admin services
securityResetPasswordWithoutLogin Reset password without login
securitySslLogin SSL encryption for login page Enforce usage of SSL connections on login page using internal redirect. Recommended. Setting up SSL/HTTPS
securitySslPages SSL encryption for ALL pages Enforce usage of SSL connections on all page using internal redirect. Not recommended. Setting up SSL/HTTPS
securityTokenExpiryEnforce Deny old style access tokens
ssoSpnegoAuthenticate SSO via domain controller Allow SPNEGO filter to automatically log in authenticated Windows users
ssoCryptoTokenActive SSO token authentication Allow single sigon from externatal components (ex. TS SSO webpart)
ssoCryptoTokenSecret SSO token shared secret Shared secret password between TS and external services. Value must match exactly.

Scheduled services

System name Display name Explantion Extra info
accountAnonoumousMeasure Anonoumous account (UserID) UserID used for normal system iteractions using the solution interfaces
adminWarningSmsList Warning SMS number list List of administrator mobile phone lists (for notifications)
healthMonitorPassword Health monitor password Parameter/password to access basic monitor service without a login (usage: service?healtMonitorPassword)
integrationInvokeCodeunit Integration execute codeunit Execute codeunits during dataintegration / webservices
maintenenceEmergencyDelay Emergency shutdown delay Number of minutes to warn users when af EMERGENCY signal is sent to the server from the admin services
maintenenceLockdoorDelay Maintenence disable login delay Number of minutes before af shutdown where users are no longer allowed to log in
maintenenceShutdownDelay Maintenence shutdown delay Number of minutes to warn users when af MAINTENENCE signal is sent to the server from the admin services
measureAnonoumous Measure anonoumous users
measureInsertDelayCount Measure insert delay (items)
measureInsertDelayMinutes Measure insert delay (minutes)
measureInsertUsingBatch Measure insert in batches
serviceAdminStatusEmail Administrator email Administrator email for sending status updates
serviceStatusActionSendDirectly Send status actions directly by mail False: Insert into user notifications. True: Send per email
serviceWebsiteMonitorGW Website monitor goodword Information that needs to be found in a page located at serviceWebsiteMonitorURL
serviceWebsiteMonitorURL Website monitor URL Address to monitor where the serviceWebsiteMonitorGW should be found
userOnlineAlertOnNewNotification Notify online users directly Display new button when users are allready logged in
userOnlineListDisplayCount Display number of online users Display number of online users at bottom of all pages

Debug

System name Display name Explantion Extra info
debugCacheResponse Caching succes / failure Log effects of caching.
debugDaemonActivity Debug daemon runs Log all runs for Service and Server daemon
debugDataLoads Debug while loading data (CSV/XML) Debugging option for designers and developers
debugExceptions Debug all Exceptions Writes stacktrace to logfiles. Alternative: Only write to eventlog.
debugIntegration Debug integration messages Debugging option for designers and developers
debugLdapCommunication Debug LDAP communication Debugging option for designers and developers
debugLdapStacktrace Debug LDAP error details Debugging option for designers and developers
debugLdapValidation Debug LDAP validation Debugging option for designers and developers
debugLoginResults Debug all user logins Debugging option for designers and developers
debugOlapDefinitions Debug OLAP definitions Write all schemas and querys to logfiles on boot
debugQuerySQL Debug all SQL queries All queries are written to System.out / logfile
debugQuestionaire Debug questionaire steps Display extra information in questionaire mode
debugRequestPerSecond Debug requests/second Calculate server load on run. Results are sent to System.out / logfile
debugRequestTime Debug response time
debugRequestTimeToPage Debug response time on page Display response time in bottom of all pages (no performance impact).
debugScriptFunctions Debug JavaScript Allow JS errors to be displayed
debugServiceDaemon Debug the Service runner Daemon Write extra information from service clients to log files
debugTemplateHandling Debug template parsing Debugging option for designers and developers
debugTokenEvaluation Debug token evaluation Debugging option for designers and developers
debugWebservices Debug the Webservice interface Debugging option for designers and developers

Filesystem

System name Display name Explantion Extra info
folderImportFile Folder: Import files Processing folder. Will be set to default value if left empty.
folderIntegrationCSV Folder: CSV data files Processing folder. Will be set to default value if left empty. Policy/folderIntegrationCSV
folderIntegrationMail Folder: Mail integration (temporary) Processing folder. Will be set to default value if left empty.
folderIntegrationXML Folder: XML integration processing Processing folder. Will be set to default value if left empty. Policy/folderIntegrationXML
folderTemplateLoad Folder: Template cache Processing folder. Will be set to default value if left empty.
folderTemplateSave Folder: Template processing Processing folder. Will be set to default value if left empty.
folderUpload Folder: Upload Will be set to default value if left empty.
folderUploadTemp Folder: Upload processing Processing folder. Will be set to default value if left empty.
mediaFilterDelayMS Media files download latency Use if filesystem is slow to pick up changes
overloadApplicationFolder Application folder Option to override. Empty value = autodetect
uploadPictureResize Reduce uploaded pictures Resize all pictures sent to server to size defined in uploadPictureSizeMaximum
uploadPictureSizeMaximum Picture maximum size Scale pictures to this maximum of pixels. Maximum height/width determines size. Only works if uploadPictureResize is set
uploadPictureSizeThumbnail Thumbnail maximum size
uploadClientScaling Use clientside graphic scaling Let browser resize pictures before upload
uploadClientScalingExclude Clientside exlusion test for scaling Set to "false" or exclusion pattern: 
   /Android(?!.*Chrome)|Opera/ .test(window.navigator && navigator.userAgent)
[1]
uploadThreadProcessing Upload processing threads Beta function. Handle file processing with threads to improve Ui responsiveness.
uploadThreadOnlyPictures Upload processing threads: Graphics only Restrict upload threads to resizeable graphics. Requires Upload processing threads

Service daemon

System name Display name Explantion Extra info
serviceAutostart Autostart service daemon Start the service daemon after boot.
serviceDaemonHeartbeatSeconds Run daemon every seconds Frequency of daemon runs. Value should match the frequency of the most demanding service.
serviceLogentriesConsolidate Compress logs
serviceLogentriesMaximumAge Maximum age logs
serviceNotificationDeleteAfterDays Maximum age notifications

Eventlog

System name Display name Explantion Extra info
eventDelayWrite Burst-write events Collect Events together in bundles in order to optimize dataload. Events can be written forcefully using the service servlet.
eventDelayWriteItemMaximum Burst-write event count Number of events before burstwrite executes. Events can be written forcefully using the service servlet.
eventPrintToStandardOut Copy errors to server log Write errors to logfiles when logging to builtin eventlog in the database
eventWriteSuccesfullLogins Write succesfull logins Log all user logins to the event log. Note that all logins regardless are logged on the user profile.

Mail server

System name Display name Explantion Extra info
mailDomain POP3: Domain
mailPassword POP3: Password Mail account password. Note this password is stored cleartext.
mailServer POP3: Server
mailUsername POP3: Username Mail account username.
smtpMailDelaySec SMPT: Message delay Delay in SECONDS between sending emails Email server setup
smtpPassword SMTP: Account password Password for SMTP account set in smtpUsername. Note this password is stored cleartext. Email server setup
smtpSendRetries SMTP: Number of retries Number of attempts to send email from queue before giving up Email server setup
smtpServer SMTP: Server address Network location of the SMTP server Email server setup
smtpSystemEmail SMTP: System mail address Sender address (from) set on all automatically generated emails. Email server setup
smtpTestEmail SMTP: Test email address Recipient of all mails when test mode is activated. Activate by enabling smtpTestMode Email server setup
smtpTestMode SMTP: Test mode (send to test email) Enable test mode where ALL emails are sent to address specified in smtpTestEmail Email server setup
smtpUsername SMTP: Account name Example: k.pedersen@lsvgroup.com Email server setup

Remote services

System name Display name Explantion Extra info
doLookupEnabledLinks Allow lookup links for fields
lookupServiceCvrRegisterUrl URL to lookup CVR
lookupServiceGeneral URL to lookup text
lookupServicePhonePersonUrl URL to lookup contacts

Protection

System name Display name Explantion Extra info
bruteforceCooldownMinutes Bruteforce reject logins (minutes) Time that logins are rejected after the bruteforce protection i activated. Security/Bruteforce
bruteforceMaxBadLogins Bruteforce maximum failed logins Amout of logins failed before new logins are rejected. Relative to bruteforceMeasurePeriod. Security/Bruteforce
bruteforceMeasurePeriod Bruteforce measure period (minutes) Timeframe for measuring amount of bad logins. Relative to bruteforceMaxBadLogins. Security/Bruteforce
bruteforceProtection Bruteforce detection active Enable brute force detection mechanisms Security/Bruteforce
securitySantizeAllUserInput Check all user input for JScripts Allow only if session variable protection is enabled

License

System name Display name Explantion Extra info
licenseHolder License: Owner Company/intitution name on the license
licenseNumber License: Number ID received from your Tempus Serva distrbutor
licenseReportAdministrator 2nd recipient of license reports Secondary recepiant of license reporting. Normally the license seller.
licenseReportingEmail 1st recipient of license reports Primary recepiant of license reporting. Normally the responsible CIO.
licenseReportLicenseServer License reporting active License reporting active
licenseSerial License: Serial code Code received from your Tempus Serva distrbutor

Database

System name Display name Explantion Extra info
dbAutoUpdate Update database on boot (recommended) Strongly recommended. Allows system to update the database when new builds are deployed.
dbNameBase SHARED database name Schema name of database with common settings. Database can be shared between multiple installations.

SMS service

System name Display name Explantion Extra info
smsConnectUrl SMS Service gateway URL
smsErrorMessage SMS error message
smsMaxLength SMS maximum message length
smsParamMessage SMS parameter name: Message
smsParamNumber SMS parameter name: Number
smsPhoneCountryCode SMS phonenumber prefix
smsPhoneMinLength SMS phonenumber min length
smsTestMode SMS testmode active Email server setup
smsTestNumber SMS testmode number Email server setup

Main menu

System name Display name Explantion Extra info
doInformationInMasterMenu Allow news articles Display relevant news articles and messages on main page
doMainMenuAccordion Use animated main menu Use slick JQuery dropdown accordion based on sections http://jqueryui.com/accordion/
doMainMenuCreateItems Display create link in main menu Display button to create records directly from the mail menu
doMainMenuDescription Display descriptions in main menu Display solution description in the main menu. Alternatively you can just leave the desciption empty.
doMainMenuRecentItems Display recent items in main menu Display list of recent items accessed for each solution in the list.
doMainMenuSections Divide menu into solution groups Split the main menu into sections.
doViewListInMasterMenu Show user views in master menu Display list of shared and personal views in the main menu

Special fields

System name Display name Explantion Extra info
allowMultilookupInLists Allow multilookup in list views Minor performance impact
allowRecursiveDelete Allow recursive record deletion Allow deletion of parent items to propagate (configure each solution)
allowRelationDuringCreation Create related records before save Allow users to create new child records before the parent is submitted / created.
doSmartDateInput Smart sate input Use relative date inputs (example: -1 = yesterday) Policy/doSmartDateInput
lookupCheckKeysAllways Lookup allways check key values
lookupIgnoreErrors Lookup ignore errors
lookupIgnoreErrorsAjax Lookup ignore AJAX errors
lookupRecordSingleItemChange Display 1 record in lookup list changes Lookup list elements will only display 1 reference after being set the first time
medicoCloakPersonUniqueID Cloak person identification data (ex. CPR) Partially hide sensitive information when not in ITEM edit mode. Example 112233-4455 becomes 112233-XXXX.
questionaireAutostart Questionaire autostart Make sure the user cannot navigate to anything else that the first question
questionaireLastButton Last button in questionaires Display a button to navigate to questionaires final page
questionaireLastResume Questionaire missing field summary Display missing fields on final page
questionaireProgress Questionaire progress Turns progress indication (bar/percentage/steps) on and off
questionaireProgressIcons Questionaire progress: Bar Display blue/grey arrows based on progress
questionaireProgressPercent Questionaire progress: Percentage Calculate the completion rate based on progress
questionaireProgressSteps Questionaire progress: Steps Display number of completed and leftover questions

Designer

System name Display name Explantion Extra info
deletionBackup Deletion backups Perform backups before deleting solutions / fields
deletionBackupDefinition Deletion copy definition Copy metadata of solution before deletion
deletionBackupRecordLimit Deletion backup record limit Maximum number of records before tables are backup up before deletion
designerDisplayHelp Display help section in designer (this menu)

Layout

System name Display name Explantion Extra info
cssStylesheetBasic Include Basic stylesheet Disable if you want 100% style control
cssStylesheetJQuery Include JQuery stylesheet Disable if you want 100% style control
diagramLargeHeight Diagram height large Ex. Runchart details
diagramLargeWidth Diagram width large Ex. Runchart details
diagramSmallHeight Diagram height small Ex. Runchart overview
diagramSmallWidth Diagram width small Ex. Runchart overview
renderListGroupColumns Use grouping columns Group column i moved to the first in the list
renderListGroupHeaders Use grouping headers Alternative: Group values displayed as column
renderListSortColumns Use sorting columns Sort column i moved to the first in the list
standardHeightMemo Standard textarea Height Default height of TEXTAREA. Value can be overloaded in each field configuration.
standardTextCropLength Text default crop length
standardWidthHeader Header standard width
standardWidthMemo Standard textarea Width Default width of TEXTAREA. Value can be overloaded in each field configuration.
standardWidthText Standard inputbox size Standard INPUT field size. Value can be overloaded in each field configuration.
windowDefaultHeight New window height (pixels) Standard height for IFRAME and popup windows
windowDefaultWidth New window width (pixels) Standard width for IFRAME and popup windows

Rendering

System name Display name Explantion Extra info
defaultHtmlDoctype HTML DOCTYPE First line of HTML response. Change if you need specific HTML compliance. System is natively xhtml 1.0 compliant.
defaultHtmlEncoding General encoding for server Codepage displayed inside the html tag
defaultHtmlVersion HTML version number Version information displayed inside the html tag
doIncludeJQuery Include JQuery library Include JQuery in compability mode
doPageSelectViaJquery Page selectors via JQuery Use JS components for page selectors (default: static html)
doIncludeScriptUserInfo Insert user info JS variables Inject user information in pages for use with custom JavaScripts
heatmapCellColorIcon Heatmap cell icon Special content inserted into all heatmap cells Moved to buttons/style in version 8945
heatmapInvertAxis Heatmap invert axis Display variables on Y axis and records on X axis
heatmapItemLinks Heatmap links to items Allow direct links from heatmap records
heatmapLegendMap Heatmap legend Display legend map of full variable names
pageselectorTableLayout Pageselector in tables Render pagesselectors as tables (normal = div)
renderLinksCompliant Render links HTML 4.0 compliant Encode links to satisfy HTML4 specification
useGoogleChart Technology diagram: Google Alternative use ChartJS (not recommended any more)
useNewChart Beta: Use new chart implementation Dashboard diagram widget configuration
diagramChartJSColors Colors for charts Set the colors used by ChartJS Dashboard diagram widget configuration
useScriptulous Technology script: Scriptulous Alternative use JQuery (recommended)

Staging

System name Display name Explantion Extra info
buildTestLinesDefault Build test data default size Amount of lines copied from live system when building sets of test data
testSessionBackground Testsession use background Markup when in test mode:. Set background image with this URL.
testSessionInlineText Testsession page information Markup when in test mode:. Put extra HTML specified in page.
testSessionTitleChange Testsession use title Markup when in test mode:. Set browser title to this text.

Codeunit

System name Display name Explantion Extra info
codeunitLoadExternal Load external codeunits Allow server to load JAR files outside webapplication WEB-INF folder
codeunitPathJarFile Filesystem folder for codeunits Folder that is considered safe to use for built-in class loader
codeunitPathJarLink Http URL folder for coedunits URL that is considered safe to use for built-in class loader
safeCreateAddGroup1 Fullauto: Add group A Option for full auto user/exclusivegroup creation
safeCreateAddGroup2 Fullauto: Add group B Option for full auto user/exclusivegroup creation
safeCreateIsDatahandler Fullauto: Assign DataHandler role Option for full auto user/exclusivegroup creation
safeCreateIsUserCreator Fullauto: Assign UserCreator role Option for full auto user/exclusivegroup creation

Language / I18N

System name Display name Explantion Extra info
languageGetFromBrowser Determine langauge from browser Pick up language settings from the browsers settings
languageUseI18N Use Internationalization Allow solutions to take advantage of I18N. Configure each solution seperately.

OLAP cubes

System name Display name Explantion Extra info
olapDateDimensionYearEnd OLAP Time dimension last year
olapDateDimensionYearStart OLAP Time dimension first year
olapEngineFolderURL OLAP engine URL (optional)
olapRebuildOnBoot Rebuild OLAP on boot Rewrite cube defintions and queries
olapUseSingleSignon OLAP Single Sign On Allow external users with security tokens (set OLAP folder to use dedicated server)
allowRemoteOlapSchema OLAP schema service Activate schema delivery service (remote OLAP servers)
olapSchemaPassword OLAP schema service password Experimental: Password for use with the schema delivery service (remote OLAP servers)
olapJPivotEnabled JPivot OLAP enabled Is the internal OLAP engine enabled (JPivot)
olapJpivotIncludeDefaultCubes Jpivot schema include default cubes Include autogenerated cubes with generated permissions
olapSaikuEnabled Saiku OLAP enabled Experimental: Is the external OLAP engine enabled (saiku)
olapSaikuIncludeCustomCubes Saiku schema include custom cubes Include custom cubes with default permissions
olapSaikuSettingWebapp Optional saiku web application name Default if value is left empty: <current webapp name> + "Saiku" Example: /SaikuWebapp
olapSaikuSettingServerUrl Optional saiku server URL Default if value is left empty: <same server> Example: http://myserver.com

REST webservice

System name Display name Explantion Extra info
restActive REST is activated Option: Disable in web.xml
restAllowAnonoumous Annonumous REST sessions Webuser can interact if given permission
restAllowAnonoumousSchema Annonumous REST metadata Webuser can interact if given permission
restListPageSize REST list service page length Maximum mnuber of items displayed in a search
restStrongTypeRequest Strong types REST requests Use strong types in WADL
restStrongTypeResponse Strong types REST response Use strong types in XSD

Password policy

System name Display name Explantion Extra info
passwordExpiry Password Expiry Allow passwords to expire according to value set in passwordExpiryAge
passwordExpiryAge Password Expiry age Maximum age of passwords
passwordExpiryWarning Days to warn for password exipry Dars to start warning the user about their password expirng, as defined by passwordExpiryAge
passwordReqCheckOnLogon Password check rules OnLogon Enforce password rules on all logons
passwordRequireLength Password require length Minimum total length of password
passwordRequireLowercase Password require Lowercase Content rule lowercase letters (ex. abc)
passwordRequirements Password requirements Enforce password rules
passwordRequireNumbers Password require Numbers Content rule numbers (ex. 123)
passwordRequireSpecial Password require Special Content rule special characters (ex. !#%&)
passwordRequireUppercase Password require Uppercase Content rule uppercase letters (ex. ABC)

Statistics

System name Display name Explantion Extra info
statisticsRegressionInfo Extra regression info Display advanvced regression correllation information
statisticsTargetPValue Target p-value for tests At what p-values are tests considered significant

Satelite server handling

System name Display name Explantion Extra info
serverSateliteMaster Master: Server is MASTER The master server controls the satelite, and contains ALL data
sateliteDatabaseHost Master: Satelite DB hostname Connection information for satelite database (requires R/W access)
sateliteDatabaseJDBC Master: Satelite DB database Connection information for satelite database (requires R/W access)
sateliteDatabaseUser Master: Satelite DB username Connection information for satelite database (requires R/W access)
sateliteDatabasePass Master: Satelite DB password Connection information for satelite database (requires R/W access)
serverSateliteSlave Satelite: Server is SATELITE Warning: The satelite is controlled by the master server, and contains a SUBSET of data
allowRemoteCacheReset Satelite: Cache reset allowed via URL Allow anonoumous cache reset using only password
cacheResetNowPassword Satelite: Cache reset password Password to include in the URL for the cache reset

FTP server

System name Display name Explantion Extra info
ftpDbConnection CrushFTP database Connection Connection string for CrushFTP authorization database. Example: jdbc:mysql://127.0.0.1/crushftp
ftpDbUsername CrushFTP database Username Username CrushFTP database
ftpDbPassword CrushFTP database Password Password CrushFTP database
ftpServerPortFtp CrushFTP port for FTP Default 21
ftpServerPortHttp CrushFTP port for HTTP Default 8081 for side by side installation

Menu customization

System name Display name Explantion Extra info
menuLayoutDefault Menu default layout name Choose between: layoutClassic layoutRibbon layoutBlockLeft layoutBlockRight
menuLayoutSelector Allow user to select menu layout Layout position selectors will displayed in the main menu
menuLevelAdvancedDefault Menu default advanced Display all menu items by default
menuLevelSelector Allow user to select menu level Simple / advanced selectors will displayed in the main menu

WebDAV

System name Display name Explantion Extra info
webdavMapDriveInMenu Map drive button Add map network drive button in main menu
webdavSessionLifetime Session token lifetime Age before session tokens expire
webdavSessionTokens Session token Session tokens allows direct editing from UI with doing authentication again
webdavSessionTokensRevalidate Session token revalidate Allow user to do basic authentication if a token expires or gets deregistered
webdavSupport Allow WebDAV Activate WebDAV for files stored i solution records

Single Sign On

System name Display name Explantion Extra info
oauthLoginDisplay SSO from login page Display SSO links on login page
oauthFacebookAllow Facebook SSO active
oauthFacebookClient Facebook API username https://developers.facebook.com/apps/
oauthFacebookSecret Facebook API password https://developers.facebook.com/apps/
oauthGoogleAllow Google SSO active
oauthGoogleClient Google API username https://developer.linkedin.com/documents/authentication
oauthGoogleSecret Google API password https://developer.linkedin.com/documents/authentication
oauthLinkedinAllow LinkedIn SSO active
oauthLinkedinClient LinkedIn API username https://console.developers.google.com/project/ts-oauth2-v1000/apiui/credential?clientType
oauthLinkedinSecret LinkedIn API password https://console.developers.google.com/project/ts-oauth2-v1000/apiui/credential?clientType
Retrieved from "https://wiki.tempusserva.dk/index.php?title=Policy&oldid=6820"