There is always a trade-off in application security. On the one hand, we are interested in permitting access, and on the other hand, we want to restrict access. While we typically think of permitting and restricting access to data, this could also be applied to forms, custom reports, or custom saved searches, as well as documents stored in the file cabinet. In addition, the methods we will use need to be simple to manage, otherwise we risk having something fall through the cracks, creating a vulnerability.
We'll begin by focusing on the tools available to authenticate users when they log in to NetSuite. We will then shift our focus to their permissions on records and forms once logged in, which is encapsulated in the user's role. Next, we will review tools to record changes the user has made to the database. We will then look at controls on specific functions, namely searches, reports, and documents in the file cabinet.
This chapter will cover the following...