SlideShare a Scribd company logo
1 of 34
Download to read offline
Cheri Polenske
Application Development Coordinator Central
Administration for
University of Nebraska and Nebraska State Colleges
 20+ years supporting Student Information Systems, 6
years supporting PeopleSoft




Denise Goin

PeopleSoft Security Central Administration for
University of Nebraska and Nebraska State Colleges
 17+ years of experience with the PeopleSoft software in
Higher Ed, City Government, K-12 and Public/Private
Commercial sector.

Chadron
Wayne

CSC

WSC

UNOOmaha




NeSIS consists of 4
Universities, 1 Technical
College and 3 State
Colleges
2 separate environments









Universities
State Colleges

Campus Solutions
Enterprise Portal (with 7
unique portals in the 2
environments)
Single Shared EPM

UNCA
Lincoln

Kearney UNK
NCTA
Curtis

UNMC

UNL

PSC Peru


Our Security Team




Our Technical Application
Support Team





2.5 Central Security Staff and each
campus has their own Security
Coordinator

6.5 Central Application Staff with
additional campus developers
2 student interns

Our PS Admin Team


4 Central Administrators


Applying Application Bundles, Security
Patches and PeopleTools Upgrades are
always challenging, University of
Nebraska has established a method of
analyzing and retrofitting mods (gasp)
for objects and security that works well
for us, and at the same time creating a
“minimum testing” guide.


Security Analysis



Application Development Analysis


Create the Security Project (DEMO)
 Get all Project names that were applied for this
maintenance period
 Combine them into 1 project, or create a copy
of each one for “security use”
 Always create your OWN projects, do not

compare the delivered projects




Analyze the Compare Reports
 Permission Lists
 Menus
 Components and Pages
 CREFS
Create “Deleted” project in DEV


Starting with the Permission List Compare Report





Create a bundle specific permission list (CS_NBA_BUNDLE28)





Look for new items (Source) and removed items (Target)
I use Highlighters and make notes!
Make a display only version of the bundle permission list
(CS_NBA_BUNDLE28_DISP)
Add the new permission list to the ALL Pages (custom) role
CS_NBA_ALLPAGES and the display only one to the all pages
display only role

Once I am done with the Permission list, I take notes and look at
component changes, cref changes just to double and triple
check!


When we do a bundle we must copy all impacted folders from
the Employee portal to the Schools specific portal
 We must insert all of the new crefs into a project to copy
to the enterprise portal from each of our schools portals
 We also must create a “delete” project for any crefs that
are being deleted from the Employee portal so that we
can remove them from the schools portals
COMPARE REPORTS
DO NOT ALWAYS
MATCH THE REAL
COMPONENT
NAME!! How do I
determine which is
correct? By side by
side analysis of
permission lists and
looking at the
menu item in app
designer.


Run queries in development looking for permission lists with
that component or a similar component
FA- %ISIR%, %INAS%
 We are pretty much down to a couple of permission lists, one
update and one display only for each of these functional areas
and we simply add the next years to the same permission list with
the current years, same thing with history pages




Some of the “components” do not match between compare
reports and the PSAUTHITEM table
Use PeopleTools > Portal > Structure and Content
 Security tab lists all permission lists with any access to the
component







In development most people have clones of PS (minus a
couple of roles)
In Test most “power testers” have our custom “All Pages” role
so they can test the new functionality as soon as the bundle
moves into test. Each Bundle permission list gets added to
the “all Pages” role.
In QA we have retained close to Production security, this is
where they should be testing that they can get to the pages
that they need with their campus security. We tell them if
they don’t see it in QA they will not see it in PRD!




Our PS Admins also run compare
reports from our DMO/vanilla
instances to our DEV instances.
The App Dev team analyzes those
compare reports for any tools objects
that may overwrite/impact local
customizations/modifications.




With app designer, in the source (DMO)
instance, open each maintenance project,
go to the Upgrade tab and click on each
object type.
Review the list at the right looking for any
object with ‘*Changed’ in the Target column.
This indicates a local modification.


Open each *Changed object with app
designer in the target instance to
review the object properties/code.
• Take note of the modification number and developer
from the object properties. Also take note of the object
detail changes from the compare report. This
spreadsheet will serve as the master list of mods to be
reapplied, retrofitted or decommissioned as well as
thoroughly tested.




For file objects, we look in the technical
documentation released from Oracle. (CS
BNDL 28 – RESOLUTION_888834)
For any delivered file object that we have
modified, we have created a custom folder
on our file system for the various categories
of file objects.


Add the affected file objects to the
bundle analysis spreadsheet.
Prepare a spreadsheet with a list of all custom
component interfaces from your target instance.
Lesson learned (and learned again) is to double
check all custom CIs.




Once the bundle has been
successfully applied to the DEV
instances, the developers begin
analyzing each object entered on the
spreadsheet to determine if each
modification is still needed.
If needed, the developers reapply or
retrofit the code in the DEV instances.


Remember to modify the code as well
as the properties of each object.
LET THE
TESTING
BEGIN!!!




Denise Goin

PeopleSoft Security Specialist Central Administration for
University of Nebraska and Nebraska State Colleges






E-mail: dgoin@nebraska.edu
Cheri Polenske
Application Development Coordinator Central Administration for
University of Nebraska and Nebraska State Colleges



E-mail: cpolenske@nebraska.edu

More Related Content

Similar to Analyzing PeopleSoft Bundle Impacts and Mod Retrofitting for the University of Nebraska

Oracle Concurrent Program Setup document
Oracle Concurrent Program Setup  documentOracle Concurrent Program Setup  document
Oracle Concurrent Program Setup documentvenkatesh gurusamy
 
HelloChapter6fgfg-Artifacts__of_theProcess.ppt
HelloChapter6fgfg-Artifacts__of_theProcess.pptHelloChapter6fgfg-Artifacts__of_theProcess.ppt
HelloChapter6fgfg-Artifacts__of_theProcess.ppt19526YuvaKumarIrigi
 
Software design.edited (1)
Software design.edited (1)Software design.edited (1)
Software design.edited (1)FarjanaAhmed3
 
Testing Presentation
Testing PresentationTesting Presentation
Testing Presentationsureshpkumar
 
Different Methodologies For Testing Web Application Testing
Different Methodologies For Testing Web Application TestingDifferent Methodologies For Testing Web Application Testing
Different Methodologies For Testing Web Application TestingRachel Davis
 
Sanjeevi's SDLC Guest Lecture in Anna University campus at AU-PERS Centre (Ye...
Sanjeevi's SDLC Guest Lecture in Anna University campus at AU-PERS Centre (Ye...Sanjeevi's SDLC Guest Lecture in Anna University campus at AU-PERS Centre (Ye...
Sanjeevi's SDLC Guest Lecture in Anna University campus at AU-PERS Centre (Ye...Sanjeevi Prasad
 
Manual testing visonia
Manual testing   visoniaManual testing   visonia
Manual testing visoniaVisoniaTechlab
 
term paper for cbd models
term paper for cbd modelsterm paper for cbd models
term paper for cbd modelsSukhdeep Singh
 
Automating and Validating Semantic Annotations.pdf
Automating and Validating Semantic Annotations.pdfAutomating and Validating Semantic Annotations.pdf
Automating and Validating Semantic Annotations.pdfKathryn Patel
 
Test Strategy Utilising Mc Useful Tools
Test Strategy Utilising Mc Useful ToolsTest Strategy Utilising Mc Useful Tools
Test Strategy Utilising Mc Useful Toolsmcthedog
 
ASE Notes - Kuntucky.docx
ASE Notes - Kuntucky.docxASE Notes - Kuntucky.docx
ASE Notes - Kuntucky.docxSanLizasAiren1
 
Pos 409 pos409 pos 409 forecasting and strategic planning -uopstudy.com
Pos 409 pos409 pos 409 forecasting and strategic planning -uopstudy.comPos 409 pos409 pos 409 forecasting and strategic planning -uopstudy.com
Pos 409 pos409 pos 409 forecasting and strategic planning -uopstudy.comULLPTT
 
Iterative Waterfall model
Iterative Waterfall modelIterative Waterfall model
Iterative Waterfall modelAnmol Purohit
 
Window Desktop Application Testing
Window Desktop Application TestingWindow Desktop Application Testing
Window Desktop Application TestingTrupti Jethva
 

Similar to Analyzing PeopleSoft Bundle Impacts and Mod Retrofitting for the University of Nebraska (20)

Oracle Concurrent Program Setup document
Oracle Concurrent Program Setup  documentOracle Concurrent Program Setup  document
Oracle Concurrent Program Setup document
 
HelloChapter6fgfg-Artifacts__of_theProcess.ppt
HelloChapter6fgfg-Artifacts__of_theProcess.pptHelloChapter6fgfg-Artifacts__of_theProcess.ppt
HelloChapter6fgfg-Artifacts__of_theProcess.ppt
 
Session3
Session3Session3
Session3
 
Software design.edited (1)
Software design.edited (1)Software design.edited (1)
Software design.edited (1)
 
Testing Presentation
Testing PresentationTesting Presentation
Testing Presentation
 
Different Methodologies For Testing Web Application Testing
Different Methodologies For Testing Web Application TestingDifferent Methodologies For Testing Web Application Testing
Different Methodologies For Testing Web Application Testing
 
Sanjeevi's SDLC Guest Lecture in Anna University campus at AU-PERS Centre (Ye...
Sanjeevi's SDLC Guest Lecture in Anna University campus at AU-PERS Centre (Ye...Sanjeevi's SDLC Guest Lecture in Anna University campus at AU-PERS Centre (Ye...
Sanjeevi's SDLC Guest Lecture in Anna University campus at AU-PERS Centre (Ye...
 
Sdlc
SdlcSdlc
Sdlc
 
Sdlc
SdlcSdlc
Sdlc
 
Manual testing visonia
Manual testing   visoniaManual testing   visonia
Manual testing visonia
 
term paper for cbd models
term paper for cbd modelsterm paper for cbd models
term paper for cbd models
 
Automating and Validating Semantic Annotations.pdf
Automating and Validating Semantic Annotations.pdfAutomating and Validating Semantic Annotations.pdf
Automating and Validating Semantic Annotations.pdf
 
Test Strategy Utilising Mc Useful Tools
Test Strategy Utilising Mc Useful ToolsTest Strategy Utilising Mc Useful Tools
Test Strategy Utilising Mc Useful Tools
 
ITFT - Software
ITFT -  SoftwareITFT -  Software
ITFT - Software
 
Jagrat_Mankad
Jagrat_MankadJagrat_Mankad
Jagrat_Mankad
 
ASE Notes - Kuntucky.docx
ASE Notes - Kuntucky.docxASE Notes - Kuntucky.docx
ASE Notes - Kuntucky.docx
 
Pos 409 pos409 pos 409 forecasting and strategic planning -uopstudy.com
Pos 409 pos409 pos 409 forecasting and strategic planning -uopstudy.comPos 409 pos409 pos 409 forecasting and strategic planning -uopstudy.com
Pos 409 pos409 pos 409 forecasting and strategic planning -uopstudy.com
 
Iterative Waterfall model
Iterative Waterfall modelIterative Waterfall model
Iterative Waterfall model
 
ibuyer_Manual
ibuyer_Manualibuyer_Manual
ibuyer_Manual
 
Window Desktop Application Testing
Window Desktop Application TestingWindow Desktop Application Testing
Window Desktop Application Testing
 

More from tecrecruiter

Omaha rug customer 2 cloud customer facing hcm ppt aug 2014
Omaha rug customer 2 cloud customer facing hcm ppt aug 2014Omaha rug customer 2 cloud customer facing hcm ppt aug 2014
Omaha rug customer 2 cloud customer facing hcm ppt aug 2014tecrecruiter
 
Upgrade time savers rug 201312
Upgrade time savers   rug 201312Upgrade time savers   rug 201312
Upgrade time savers rug 201312tecrecruiter
 
Rug Presentation Conagra
Rug Presentation ConagraRug Presentation Conagra
Rug Presentation Conagratecrecruiter
 
Omaha Rug2012 People Soft Fms 9 1 Overview Apr2012
Omaha Rug2012 People Soft Fms 9 1 Overview Apr2012Omaha Rug2012 People Soft Fms 9 1 Overview Apr2012
Omaha Rug2012 People Soft Fms 9 1 Overview Apr2012tecrecruiter
 

More from tecrecruiter (8)

Omaha rug mobile
Omaha rug mobileOmaha rug mobile
Omaha rug mobile
 
Omaha rug customer 2 cloud customer facing hcm ppt aug 2014
Omaha rug customer 2 cloud customer facing hcm ppt aug 2014Omaha rug customer 2 cloud customer facing hcm ppt aug 2014
Omaha rug customer 2 cloud customer facing hcm ppt aug 2014
 
Upgrade time savers rug 201312
Upgrade time savers   rug 201312Upgrade time savers   rug 201312
Upgrade time savers rug 201312
 
Cio golf outing
Cio golf outingCio golf outing
Cio golf outing
 
Qtr 3 2012 Ppt
Qtr 3 2012 PptQtr 3 2012 Ppt
Qtr 3 2012 Ppt
 
Rug Presentation Conagra
Rug Presentation ConagraRug Presentation Conagra
Rug Presentation Conagra
 
Omaha Rug2012 People Soft Fms 9 1 Overview Apr2012
Omaha Rug2012 People Soft Fms 9 1 Overview Apr2012Omaha Rug2012 People Soft Fms 9 1 Overview Apr2012
Omaha Rug2012 People Soft Fms 9 1 Overview Apr2012
 
Oppd Rug 2012
Oppd Rug 2012Oppd Rug 2012
Oppd Rug 2012
 

Recently uploaded

"ML in Production",Oleksandr Bagan
"ML in Production",Oleksandr Bagan"ML in Production",Oleksandr Bagan
"ML in Production",Oleksandr BaganFwdays
 
WordPress Websites for Engineers: Elevate Your Brand
WordPress Websites for Engineers: Elevate Your BrandWordPress Websites for Engineers: Elevate Your Brand
WordPress Websites for Engineers: Elevate Your Brandgvaughan
 
DevoxxFR 2024 Reproducible Builds with Apache Maven
DevoxxFR 2024 Reproducible Builds with Apache MavenDevoxxFR 2024 Reproducible Builds with Apache Maven
DevoxxFR 2024 Reproducible Builds with Apache MavenHervé Boutemy
 
Dev Dives: Streamline document processing with UiPath Studio Web
Dev Dives: Streamline document processing with UiPath Studio WebDev Dives: Streamline document processing with UiPath Studio Web
Dev Dives: Streamline document processing with UiPath Studio WebUiPathCommunity
 
TeamStation AI System Report LATAM IT Salaries 2024
TeamStation AI System Report LATAM IT Salaries 2024TeamStation AI System Report LATAM IT Salaries 2024
TeamStation AI System Report LATAM IT Salaries 2024Lonnie McRorey
 
Passkey Providers and Enabling Portability: FIDO Paris Seminar.pptx
Passkey Providers and Enabling Portability: FIDO Paris Seminar.pptxPasskey Providers and Enabling Portability: FIDO Paris Seminar.pptx
Passkey Providers and Enabling Portability: FIDO Paris Seminar.pptxLoriGlavin3
 
Moving Beyond Passwords: FIDO Paris Seminar.pdf
Moving Beyond Passwords: FIDO Paris Seminar.pdfMoving Beyond Passwords: FIDO Paris Seminar.pdf
Moving Beyond Passwords: FIDO Paris Seminar.pdfLoriGlavin3
 
What's New in Teams Calling, Meetings and Devices March 2024
What's New in Teams Calling, Meetings and Devices March 2024What's New in Teams Calling, Meetings and Devices March 2024
What's New in Teams Calling, Meetings and Devices March 2024Stephanie Beckett
 
Time Series Foundation Models - current state and future directions
Time Series Foundation Models - current state and future directionsTime Series Foundation Models - current state and future directions
Time Series Foundation Models - current state and future directionsNathaniel Shimoni
 
Take control of your SAP testing with UiPath Test Suite
Take control of your SAP testing with UiPath Test SuiteTake control of your SAP testing with UiPath Test Suite
Take control of your SAP testing with UiPath Test SuiteDianaGray10
 
Use of FIDO in the Payments and Identity Landscape: FIDO Paris Seminar.pptx
Use of FIDO in the Payments and Identity Landscape: FIDO Paris Seminar.pptxUse of FIDO in the Payments and Identity Landscape: FIDO Paris Seminar.pptx
Use of FIDO in the Payments and Identity Landscape: FIDO Paris Seminar.pptxLoriGlavin3
 
Transcript: New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024
Transcript: New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024Transcript: New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024
Transcript: New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024BookNet Canada
 
Digital Identity is Under Attack: FIDO Paris Seminar.pptx
Digital Identity is Under Attack: FIDO Paris Seminar.pptxDigital Identity is Under Attack: FIDO Paris Seminar.pptx
Digital Identity is Under Attack: FIDO Paris Seminar.pptxLoriGlavin3
 
Developer Data Modeling Mistakes: From Postgres to NoSQL
Developer Data Modeling Mistakes: From Postgres to NoSQLDeveloper Data Modeling Mistakes: From Postgres to NoSQL
Developer Data Modeling Mistakes: From Postgres to NoSQLScyllaDB
 
Generative AI for Technical Writer or Information Developers
Generative AI for Technical Writer or Information DevelopersGenerative AI for Technical Writer or Information Developers
Generative AI for Technical Writer or Information DevelopersRaghuram Pandurangan
 
The Fit for Passkeys for Employee and Consumer Sign-ins: FIDO Paris Seminar.pptx
The Fit for Passkeys for Employee and Consumer Sign-ins: FIDO Paris Seminar.pptxThe Fit for Passkeys for Employee and Consumer Sign-ins: FIDO Paris Seminar.pptx
The Fit for Passkeys for Employee and Consumer Sign-ins: FIDO Paris Seminar.pptxLoriGlavin3
 
Sample pptx for embedding into website for demo
Sample pptx for embedding into website for demoSample pptx for embedding into website for demo
Sample pptx for embedding into website for demoHarshalMandlekar2
 
How AI, OpenAI, and ChatGPT impact business and software.
How AI, OpenAI, and ChatGPT impact business and software.How AI, OpenAI, and ChatGPT impact business and software.
How AI, OpenAI, and ChatGPT impact business and software.Curtis Poe
 
The Role of FIDO in a Cyber Secure Netherlands: FIDO Paris Seminar.pptx
The Role of FIDO in a Cyber Secure Netherlands: FIDO Paris Seminar.pptxThe Role of FIDO in a Cyber Secure Netherlands: FIDO Paris Seminar.pptx
The Role of FIDO in a Cyber Secure Netherlands: FIDO Paris Seminar.pptxLoriGlavin3
 
SIP trunking in Janus @ Kamailio World 2024
SIP trunking in Janus @ Kamailio World 2024SIP trunking in Janus @ Kamailio World 2024
SIP trunking in Janus @ Kamailio World 2024Lorenzo Miniero
 

Recently uploaded (20)

"ML in Production",Oleksandr Bagan
"ML in Production",Oleksandr Bagan"ML in Production",Oleksandr Bagan
"ML in Production",Oleksandr Bagan
 
WordPress Websites for Engineers: Elevate Your Brand
WordPress Websites for Engineers: Elevate Your BrandWordPress Websites for Engineers: Elevate Your Brand
WordPress Websites for Engineers: Elevate Your Brand
 
DevoxxFR 2024 Reproducible Builds with Apache Maven
DevoxxFR 2024 Reproducible Builds with Apache MavenDevoxxFR 2024 Reproducible Builds with Apache Maven
DevoxxFR 2024 Reproducible Builds with Apache Maven
 
Dev Dives: Streamline document processing with UiPath Studio Web
Dev Dives: Streamline document processing with UiPath Studio WebDev Dives: Streamline document processing with UiPath Studio Web
Dev Dives: Streamline document processing with UiPath Studio Web
 
TeamStation AI System Report LATAM IT Salaries 2024
TeamStation AI System Report LATAM IT Salaries 2024TeamStation AI System Report LATAM IT Salaries 2024
TeamStation AI System Report LATAM IT Salaries 2024
 
Passkey Providers and Enabling Portability: FIDO Paris Seminar.pptx
Passkey Providers and Enabling Portability: FIDO Paris Seminar.pptxPasskey Providers and Enabling Portability: FIDO Paris Seminar.pptx
Passkey Providers and Enabling Portability: FIDO Paris Seminar.pptx
 
Moving Beyond Passwords: FIDO Paris Seminar.pdf
Moving Beyond Passwords: FIDO Paris Seminar.pdfMoving Beyond Passwords: FIDO Paris Seminar.pdf
Moving Beyond Passwords: FIDO Paris Seminar.pdf
 
What's New in Teams Calling, Meetings and Devices March 2024
What's New in Teams Calling, Meetings and Devices March 2024What's New in Teams Calling, Meetings and Devices March 2024
What's New in Teams Calling, Meetings and Devices March 2024
 
Time Series Foundation Models - current state and future directions
Time Series Foundation Models - current state and future directionsTime Series Foundation Models - current state and future directions
Time Series Foundation Models - current state and future directions
 
Take control of your SAP testing with UiPath Test Suite
Take control of your SAP testing with UiPath Test SuiteTake control of your SAP testing with UiPath Test Suite
Take control of your SAP testing with UiPath Test Suite
 
Use of FIDO in the Payments and Identity Landscape: FIDO Paris Seminar.pptx
Use of FIDO in the Payments and Identity Landscape: FIDO Paris Seminar.pptxUse of FIDO in the Payments and Identity Landscape: FIDO Paris Seminar.pptx
Use of FIDO in the Payments and Identity Landscape: FIDO Paris Seminar.pptx
 
Transcript: New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024
Transcript: New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024Transcript: New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024
Transcript: New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024
 
Digital Identity is Under Attack: FIDO Paris Seminar.pptx
Digital Identity is Under Attack: FIDO Paris Seminar.pptxDigital Identity is Under Attack: FIDO Paris Seminar.pptx
Digital Identity is Under Attack: FIDO Paris Seminar.pptx
 
Developer Data Modeling Mistakes: From Postgres to NoSQL
Developer Data Modeling Mistakes: From Postgres to NoSQLDeveloper Data Modeling Mistakes: From Postgres to NoSQL
Developer Data Modeling Mistakes: From Postgres to NoSQL
 
Generative AI for Technical Writer or Information Developers
Generative AI for Technical Writer or Information DevelopersGenerative AI for Technical Writer or Information Developers
Generative AI for Technical Writer or Information Developers
 
The Fit for Passkeys for Employee and Consumer Sign-ins: FIDO Paris Seminar.pptx
The Fit for Passkeys for Employee and Consumer Sign-ins: FIDO Paris Seminar.pptxThe Fit for Passkeys for Employee and Consumer Sign-ins: FIDO Paris Seminar.pptx
The Fit for Passkeys for Employee and Consumer Sign-ins: FIDO Paris Seminar.pptx
 
Sample pptx for embedding into website for demo
Sample pptx for embedding into website for demoSample pptx for embedding into website for demo
Sample pptx for embedding into website for demo
 
How AI, OpenAI, and ChatGPT impact business and software.
How AI, OpenAI, and ChatGPT impact business and software.How AI, OpenAI, and ChatGPT impact business and software.
How AI, OpenAI, and ChatGPT impact business and software.
 
The Role of FIDO in a Cyber Secure Netherlands: FIDO Paris Seminar.pptx
The Role of FIDO in a Cyber Secure Netherlands: FIDO Paris Seminar.pptxThe Role of FIDO in a Cyber Secure Netherlands: FIDO Paris Seminar.pptx
The Role of FIDO in a Cyber Secure Netherlands: FIDO Paris Seminar.pptx
 
SIP trunking in Janus @ Kamailio World 2024
SIP trunking in Janus @ Kamailio World 2024SIP trunking in Janus @ Kamailio World 2024
SIP trunking in Janus @ Kamailio World 2024
 

Analyzing PeopleSoft Bundle Impacts and Mod Retrofitting for the University of Nebraska

  • 1.
  • 2. Cheri Polenske Application Development Coordinator Central Administration for University of Nebraska and Nebraska State Colleges  20+ years supporting Student Information Systems, 6 years supporting PeopleSoft   Denise Goin PeopleSoft Security Central Administration for University of Nebraska and Nebraska State Colleges  17+ years of experience with the PeopleSoft software in Higher Ed, City Government, K-12 and Public/Private Commercial sector. 
  • 3. Chadron Wayne CSC WSC UNOOmaha   NeSIS consists of 4 Universities, 1 Technical College and 3 State Colleges 2 separate environments      Universities State Colleges Campus Solutions Enterprise Portal (with 7 unique portals in the 2 environments) Single Shared EPM UNCA Lincoln Kearney UNK NCTA Curtis UNMC UNL PSC Peru  Our Security Team   Our Technical Application Support Team    2.5 Central Security Staff and each campus has their own Security Coordinator 6.5 Central Application Staff with additional campus developers 2 student interns Our PS Admin Team  4 Central Administrators
  • 4.  Applying Application Bundles, Security Patches and PeopleTools Upgrades are always challenging, University of Nebraska has established a method of analyzing and retrofitting mods (gasp) for objects and security that works well for us, and at the same time creating a “minimum testing” guide.
  • 6.
  • 7.
  • 8.  Create the Security Project (DEMO)  Get all Project names that were applied for this maintenance period  Combine them into 1 project, or create a copy of each one for “security use”  Always create your OWN projects, do not compare the delivered projects   Analyze the Compare Reports  Permission Lists  Menus  Components and Pages  CREFS Create “Deleted” project in DEV
  • 9.
  • 10.
  • 11.  Starting with the Permission List Compare Report    Create a bundle specific permission list (CS_NBA_BUNDLE28)    Look for new items (Source) and removed items (Target) I use Highlighters and make notes! Make a display only version of the bundle permission list (CS_NBA_BUNDLE28_DISP) Add the new permission list to the ALL Pages (custom) role CS_NBA_ALLPAGES and the display only one to the all pages display only role Once I am done with the Permission list, I take notes and look at component changes, cref changes just to double and triple check!
  • 12.  When we do a bundle we must copy all impacted folders from the Employee portal to the Schools specific portal  We must insert all of the new crefs into a project to copy to the enterprise portal from each of our schools portals  We also must create a “delete” project for any crefs that are being deleted from the Employee portal so that we can remove them from the schools portals
  • 13. COMPARE REPORTS DO NOT ALWAYS MATCH THE REAL COMPONENT NAME!! How do I determine which is correct? By side by side analysis of permission lists and looking at the menu item in app designer.
  • 14.
  • 15.
  • 16.
  • 17.
  • 18.
  • 19.
  • 20.
  • 21.  Run queries in development looking for permission lists with that component or a similar component FA- %ISIR%, %INAS%  We are pretty much down to a couple of permission lists, one update and one display only for each of these functional areas and we simply add the next years to the same permission list with the current years, same thing with history pages   Some of the “components” do not match between compare reports and the PSAUTHITEM table Use PeopleTools > Portal > Structure and Content  Security tab lists all permission lists with any access to the component 
  • 22.    In development most people have clones of PS (minus a couple of roles) In Test most “power testers” have our custom “All Pages” role so they can test the new functionality as soon as the bundle moves into test. Each Bundle permission list gets added to the “all Pages” role. In QA we have retained close to Production security, this is where they should be testing that they can get to the pages that they need with their campus security. We tell them if they don’t see it in QA they will not see it in PRD!
  • 23.
  • 24.   Our PS Admins also run compare reports from our DMO/vanilla instances to our DEV instances. The App Dev team analyzes those compare reports for any tools objects that may overwrite/impact local customizations/modifications.
  • 25.   With app designer, in the source (DMO) instance, open each maintenance project, go to the Upgrade tab and click on each object type. Review the list at the right looking for any object with ‘*Changed’ in the Target column. This indicates a local modification.
  • 26.  Open each *Changed object with app designer in the target instance to review the object properties/code.
  • 27. • Take note of the modification number and developer from the object properties. Also take note of the object detail changes from the compare report. This spreadsheet will serve as the master list of mods to be reapplied, retrofitted or decommissioned as well as thoroughly tested.
  • 28.   For file objects, we look in the technical documentation released from Oracle. (CS BNDL 28 – RESOLUTION_888834) For any delivered file object that we have modified, we have created a custom folder on our file system for the various categories of file objects.
  • 29.  Add the affected file objects to the bundle analysis spreadsheet.
  • 30. Prepare a spreadsheet with a list of all custom component interfaces from your target instance. Lesson learned (and learned again) is to double check all custom CIs.
  • 31.   Once the bundle has been successfully applied to the DEV instances, the developers begin analyzing each object entered on the spreadsheet to determine if each modification is still needed. If needed, the developers reapply or retrofit the code in the DEV instances.
  • 32.  Remember to modify the code as well as the properties of each object.
  • 34.   Denise Goin PeopleSoft Security Specialist Central Administration for University of Nebraska and Nebraska State Colleges    E-mail: dgoin@nebraska.edu Cheri Polenske Application Development Coordinator Central Administration for University of Nebraska and Nebraska State Colleges  E-mail: cpolenske@nebraska.edu