SL-Series Enhanced Management Security User s Guide SICOM Systems, Inc. 4140 Skyron Drive Doylestown, Pennsylvania 18902 800-54-SICOM (800-547-4266) or 215-489-2500 http://www.sicom.com sales@sicom.com
SL-Series Enhanced Management Security User s Guide by SICOM Systems, Inc. 4140 Skyron Drive Doylestown, Pennsylvania 18902 800-54-SICOM (800-547-4266) or 215-489-2500 http://www.sicom.com sales@sicom.com Copyright 2008 SICOM Systems, Inc. PROPRIETARY RIGHTS NOTICE All rights reserved. No part of this material may be reproduced or transmitted in any form or by any means, electronic, mechanical, or otherwise, including photocopying and recording or in connection with any information storage or retrieval system, without the written permission in writing from SICOM Systems, Inc. SICOM Systems, Inc. has taken reasonable preventive measures to ensure the accuracy of the information contained in this manual. However, SICOM Systems, Inc. makes no warranties or representations with respect to the information contained herein and SICOM shall not be liable for damages resulting from any errors or omissions herein or from the use of the information contained in this manual. Document Revision: 1.04, 03/18/2008 LINUX is a registered trademark of Linus Torvalds. SICOM and the "S" logo are trademarks of SICOM Systems Incorporated.
Table of Contents I. Enhanced Management Security... 1 Introduction... 1 Welcome!... 1 Setting User Permissions... 3 User Edit / Assign Access Codes... 3 Adding a New User... 4 Deleting/Deactivating a User... 5 Reactivating a User... 5 Assigning Manager Access Cards to Users for Use on the POS... 5 Changing a User s Manager Access Card if Being Replaced... 6 Deleting a User s POS Access... 6 Restricting Menu Access... 7 Edit Menu Option Levels... 7 Access Level Report... 8 User Access Report... 8 Reporting... 11 POS Action Log... 11 iii
iv
Introduction Welcome! In a typical system, control over the use of certain order entry functions such as overrings, discounts, waste, etc. are determined by the use of a Manager 1 card. All Manager 1 cards are the same. What tends to happen is the card is either left in the terminal all of the time or the card is given to an employee to use and is not quickly returned. Unfortunately, other than knowing what time an overring or discount was performed (by laboriously searching transaction logs) there is no accountability for a specific person. Figure 1. Manager 1 Card. Enhanced Management Security provides the ability for each authorized person to have a trackable, serialized card, assigned for use by only that person. These cards are called Manager Access Cards. In addition, events may be recorded for easy review. For example, Deletes, Overrings, Free Food and Employee or Manager Meals can be tracked. The date, time, insert number, employee number, order number, and amount are tracked for quick review. If this information is not sufficient (and if it is within 7 days) the individual insert transaction log can be viewed. It is much easier to search as the time of the the transaction and the order number are already known. When the Enhanced Management Security modules is installed, the standard Manager 1 card can be disabled. Figure 2. Manager Access Card. 1
Introduction To begin, select Maintenance from the Main Menu, then Restaurant Configuration, and finally, select System Security. When the System Security menu option is selected from the Restaurant Configuration menu, the following menu will be displayed: These menu options allow you to place restrictions on all features of the system, including users, menus, Manager Access Cards, and remote users. You can also obtain POS Action reports which detail the individual use of Manager Access Cards. Please note that some options or menus may not be available on your system. Special Note When initially installed, your original Manager 1 cards will still work. Once all employees needing POS access have been provided with an individual Access Card, disable use of Non-Manager Access Cards in System Maintenance Tools -> Global POS Options. If you do not have access to this menu, contact your System Administrator or SICOM Support at 800-54-SICOM (800-547-4266) or 215-489-2500 for assistance. 2
Setting User Permissions User Edit / Assign Access Codes Figure 1. Security User Edit. Here is where you can add, delete or modify users of your system. You also add or change Manager Access Card assignment here as well. User Number: This is the user s specific number. This cannot be changed. Username: The user s Management login name. This is the text used for logging into the Management menus. This field is not case-sensitive. SSN (& Confirm SSN): Input the user s Social Security Number, or other unique identification number. Confirm that you have the correct information entered by re-entering the same information in the Confirm SSN field. Password (& Confirm Password): Input the user s password to login into the Management menus. This field is case-sensitive. Be sure to enter the password exactly as you want it typed when logging into the Management menus. You can use letters, numbers, and special characters in the password. Confirm that you have the correct information entered by re-entering the same information in the Confirm Password field. Access Level: This is the user s Management Access Level. This defines which features, menus, or reports that this user can access. To set Menu Access Levels for features, menus, and reports, see Restricting Menu Access in the next chapter. User Report Type: This defines which type of report should be displayed on-screen when logged in. Default is to display the report as defined by the report itself, currently set as PDF. HTML will display the report as a web page on screen, but will not be printable to a printer. TEXT will display reports on-screen as raw text, unformatted; Again, not printable to a printer. PDF will display reports in the Portable Document Format, easily 3
Setting User Permissions saved and printable from any computer with a PDF reader and printer. SICOM recommends that you leave this field set to DEFAULT unless you have reason to change it. User Paper Size: This field defines the paper size for reports. Options include US LETTER, US LEGAL, and A4. Set this field to the paper size you wish to print to. SICOM recommends that you leave this field set to US LETTER unless you have reason to change it. User Language/Locale: Select the default language for the user. The DEFAULT setting is currently English/US. POS Password (& Confirm POS Password): This field is to enable the user to perform related POS functions (i.e. deletes, overrings, cashier log on/off/deactivate, etc.) if you have restricted access to those functions by requiring a POS Manager Access Card be present in order to use. Input the SERIAL NUMBER for the Manager Access Card that you wish to assign for this user. Check the blue Manager Access Card for this number. Cards cannot be assigned to more than one user at a time. Confirm that you have the correct information entered by re-entering the same information in the Confirm POS Password field. You can also enter any other number to use as a POS Password if your POS terminals are configured with a Manager Login button. If you do not have one configured and wish to, contact your System Administrator or SICOM Support at 800-54-SICOM (800-547-4266) or 215-489-2500 for assistance. POS Access Level: Once a POS Password has been entered for a user, this field will be enabled for you to set the POS Manager Access Card Level for this user. You can choose any level from 1 to 15. 0 will disable the card. You can assign different levels of Key Locks to different functions. If you would like to restrict what functions can be performed by individual employees, then set up varying levels of Manager Card access. Here is an example: Function POS Key Lock Users and their own (POS Access Level) Shift Leader (1) Asst Manager (2) General Mgr (3) Deletes 1 Can Do Can Do Can Do Discounts 2 Can t Do Can Do Can Do Overrings 3 Can t Do Can t Do Can Do This shows that deletes have a key lock of 1, discounts 2, and overrings 3. The shift leader has an access level of 1, and can only perform deletes. The assistant manager has an access level of 2, and can perform deletes and discounts, but not overrings. The general manager can perform all functions, due to their access level of 3. Special Note When initially installed, your original Manager 1 cards will still work. Once all employees needing POS access have been provided with an individual Access Card, disable use of Non-Manager Access Cards in System Maintenance Tools -> Global POS Options. If you do not have access to this menu, contact your System Administrator or SICOM Support at 800-54-SICOM (800-547-4266) or 215-489-2500 for assistance. 4
Adding a New User Setting User Permissions Make sure that all employees/managers that will be assigned a username (and possibly a Manager Access Card) have their SSN or a unique employee number in the SSN field. The SSN 999-99-9999 is a reserved number and should not be assigned to any employee. 1. Press ADD to a new user. 2. Enter the user s USERNAME. 3. Enter the user s SSN. Re-enter the SSN in the CONFIRM SSN field. 4. Enter the user s PASSWORD for Management Log In. Re-enter the PASSWORD in the CONFIRM PASS- WORD field. 5. Enter in the user s assigned ACCESS LEVEL. This number can be from 1 to 98. 6. Select the user s REPORT TYPE. The default setting (PDF) is recommended. 7. Select the user s report PAPER SIZE. The default setting (Letter) is recommended. 8. Select the user s LANGUAGE/LOCALE. The default setting is English/US. Press SUBMIT to save your changes and to add this user. The new user can now Log In to the SL-Series Management menus. Deleting/Deactivating a User It is suggested that a user s security entry be deactivated as soon as possible if they quit or are fired. Please note that if a user loses their card, or needs it replaced, you do NOT need to deactivate the user to replace the card. Simply follow the instructions under the Changing a User s Manager Access Card if Being Replaced section of this chapter. 1. Select the user s USERNAME from the Quick Search dropdown menu. 2. Set the ACCESS LEVEL to 0. 3. Set the POS ACCESS LEVEL to 0. 4. Press the SHOW ALL button. 5. Next to the user s USER NUMBER, check the DEACTIVATE box. Press SUBMIT to save your changes and to deactivate this user. The user is now inactive and may not Log In to the SL-Series Management menus. Reactivating a User 1. Press the SHOW ALL button. 2. Select the user s USERNAME from the Quick Search dropdown menu. 3. Next to the user s USER NUMBER, UN-check the DEACTIVATE box. 4. Enter the user s PASSWORD for Management Log In. Re-enter the PASSWORD in the CONFIRM PASS- WORD field. 5. Enter in the user s assigned ACCESS LEVEL. This number can be from 1 to 98. Press SUBMIT to save your changes and to reactivate this user. The user can now Log In to the SL-Series Management menus again. 5
Setting User Permissions Assigning Manager Access Cards to Users for Use on the POS 1. The user s USERNAME must be active. 2. Select the user s USERNAME from the Quick Search dropdown menu. 3. Enter the Manager Access Card s SERIAL NUMBER in the POS PASSWORD field. Re-enter the SERIAL NUMBER in the CONFIRM POS PASSWORD field. 4. Press SUBMIT to continue. 5. Select the user s POS ACCESS LEVEL to use on the POS registers. This number can be from 1 to 15. Press SUBMIT to save your changes and to activate the Manager Access Card for this user. Changing a User s Manager Access Card if Being Replaced 1. Select the user s USERNAME from the Quick Search dropdown menu. 2. Enter the NEW Manager Access Card s SERIAL NUMBER in the POS PASSWORD field. Re-enter the NEW SERIAL NUMBER in the CONFIRM POS PASSWORD field. Press SUBMIT to save your changes and to change the Manager Access Card for this user. Deleting a User s POS Access 1. Select the user s USERNAME from the Quick Search dropdown menu. 2. Set the POS ACCESS LEVEL to 0. Press SUBMIT to save your changes and to deactivate POS Access for this user. 6
Restricting Menu Access Edit Menu Option Levels The system allows restrictions to be placed on all of it s menus. There are 98 security levels. 0 is the lowest and 98 is the highest. This section will list each of the menus that you are able to restrict. Shown are the Menu or Report Name, it s ID number, and it s current Access Level Restriction. The Access Level Restriction shows the minimum User Access Level required to access the Menu/Report. The Menus and Reports are grouped into several types, shown in the Quick Search dropdown menu. You can select and modify each group simply by selecting the appropriate type from the dropdown menu. Access Level 0 Only - Group Type Each Menu/Report listed in the Access Level 0 Only group type is REQUIRED to be set to 0. This is due to the fact that these items listed are considered core functions, and are accessed by other Menus or Reports that themselves are restrictable. If you set an access level to any item on this Access Level 0 Only group type, you might unwittingly disable other Menus/Reports in other group types. 7
Restricting Menu Access Level 98 access is reserved for your System Administrator, who has completed "SICOM 101", a 5-day comprehensive training class held at our Corporate Offices. If you would like more information about SICOM 101, call SICOM Sales at 800-54-SICOM (800-547-4266) or 215-489-2500 or email sales@sicom.com. In the example on the previous page, anyone with an Access Level of 15 will be able to access the report or function listed with a value of 0 or 15, but will not be able to gain access to the Terminal NRS Report, which is listed as 75. Users with an Access Level of 14 or lower can only gain access to the items listed as 0. If you enter a 0, then the menu will be available to anyone, even those users who do not log in. Access Level Report This report displays all the group types, their Menus and Reports, and the Access Level Required for each. See the sample below: Figure 1. Sample excerpt from an Access Level report. 8
User Access Report Restricting Menu Access This report is used to find out which users have access to which Menus, Reports, or features of the SL-Series system. The report lists each user with an access level equal or lower to yours, along with the user numbers. Along the top you will see columns for each user s number. Along the left will be each group type and it s Menus and Reports and it s Access Level required. If a user has access to the Menu or Report a XX will appear in the row for the Menu or Report, under the user number s column. See the sample below: Figure 2. Sample excerpt from a User Access report. 9
Restricting Menu Access 10
Reporting POS Action Log This report will display the POS Management Activity log for each Manager Access Card for each type of function that you have configured to track. Items like Employee meals, Overrings, Skims, and Deletes will be reported. This list can be filtered to show a specific event, and/or employee over a specified number of days, weeks, or over the month. Note that depending on when the file was updated All Available, Today, Yesterday, This Week and This Month data may not be available from this file. Contact your System Administrator to configure which PLUs you wish to track. You can track any PLU that has a Manager Card restriction placed on the button ringing it up. Figure 1. Sample excerpt from an POS Action Log. 11
Reporting 12