Home

USER MANUAL Security - Websams Central Document Repository

1. vBottom a Group Description Type SYSTEM_ADMIN WebSAMS System Administrator Built in Mm SCHOOL_HEAD School Head Built in 7 ALLOCATION_GROUP Allocation Group Built in TT ANP_ADMIN Award and Punishment Team Built in Mm CDS_ADMIN CDS Administrator Built in rl CLERK Clerk Built in M DM_ADMIN Data Management Administrator Built in m DM_USER Data Management User Built in M FMP_ACCT_CLERK FMP Accounts Clerk Built in M FMP_ADMIN FMP Administrator Built in I FMP_PETTYCASH_CLERK FMP Petty Cash Clerk Built in M FMP_USER1 FMP USER 1 Built in mM FMP_USER2 FMP USER 2 Built in M FMP_LUSER3 FMP USER 3 Built in m HKEA HKEA Built in m NAA_ADMIN NAA Administrator Built in m PARENT Parent Built in M REPORT_ADMIN Repor Management Administrator Built in 7 SENIOR_TEACHER Senior Teacher Built in m STAFF Staff Built in m STAFF_MANAGEMENT Staff Management Built in M STUDENT Student Built in M STUDENT_HELPERS Student Helpers Built in 6 To detach user groups from the user account i Check the box es adjacent to the group s to be detached ii Click Detach Group button to detach group s 7 To attach Internet Access Time Profiles to the account i Click Attach Profile button ii Check the box es to select the profile s to be attached in the pop up screen 8 To detach Internet Access Time Profiles from the user account i Check the box es adjacent to the profile s to be detached ii Click Deta
2. User Procedures 1 Click Security gt Access Control gt User Group on the left menu 2 Select the User Group by checking the box beside the Group ID column 3 Click Copy button S SEC02 05 Security gt Access Control gt User Group gt Group Description Group Desc Copy User Group Copy From STAFF Staff Group ID Group Description Chinese Group Description Note 1 Please enter Group ID and Group Description 2 Length of Group ID 1 20 characters 3 Group ID can contain only the characters of a z A Z 0 9 or _ Module Function gt Student gt Attendance gt Student Activities gt Award amp Punishment gt Staff Deployment gt Code Management gt archive Only authorised function will be shown 4 Fill in the Group ID Group Description and Chinese Group Description for the new group Group ID cannot be duplicated with any existing group 5 Click Save button to create the new group Copyright 2007 Education Bureau The Government of the HKSAR Page 10 All Rights Reserved WebSAMS User Manual Version 1 3 Li Post effects 1 The user group created will have a set of function access rights same as that of the original user group less the restricted modules functions 2 Users in the original user group will not be copied to the newly created user group L Notes 1 The access rights of the source group for every module can be v
3. 2 A report will be generated and it is in PDF format 3 The report Reset Password Report R SEC012 E generated will be filed to Report Management gt Repository L Notes 1 There is no limitation on the frequency for password reset 2 If no user account exists under the specific options No record will be shown 3 After password reset it is not necessary for user to change the password during the first login Create Individual Account L Function Description User can create a new user account through the User Account Maintenance function L Pre requisites 1 The Staff Student or Guardian information for the corresponding user type must be present before creation of a user account of any one of these three types 2 For Student or Parent account the student must be an active student currently or newly admit student in next school year with schooling record and the parent must be the guardian of an active student currently or newly admit student in next school year with schooling record 3 For Staff account the staff be an active staff currently not departed or having future employment record 4 Only one user account can been created for the same student parent or staff However if a parent has more than one child in the same school he she can have one parent account for each child D User Procedures Copyright 2007 Education Bureau The Government of the HKSAR Page 30
4. Maintenance By Student Vv Vv 7 Maintenance By Batch Vv Vv Vv Suspected Dropout Notifying Parent Guardian Vv Vv Vv Suspected Dropout Maintain Suspected Dropout Vv Vv Vv Suspected Dropout Return of Suspected Dropout Vv Vv Vv Vv Consolidation rd K m Enquiry Vv m Report M M Top M Reset i H save Tl E close 5 Click Save button Copyright 2007 Education Bureau The Government of the HKSAR Page 39 All Rights Reserved WebSAMS User Manual Version 1 3 Li Post effects Changes to location access rights will take effect when users login WebSAMS the next time B Notes 1 There are two master settings in the System Configuration function to control access from ITED LAN Segment and from the Internet If the master settings are turned off even though location access rights have been granted login is not allowed outside the SAMS LAN Segment 2 Users actual access rights outside the SAMS LAN Segments depends on i the master settings defined in the System Configuration ii the location access rights and iii his her own access rights inherited from the user groups to which he she belongs 3 By default some functions in WebSAMS are not accessible outside SAMS LAN segment They are IP Configuration Staff Audit Trail and FMP Audit Trail 4 The location access control settings apply to all user accounts It is not designed to set rights on individual user group or user account basi
5. N means no access rights and means the right not applicable 5 Users of a user group can access a function only if the user group has access right to this function and the accessibility of this function outside SAMS LAN Segment has been turned on in the Location Access Control function 6 Report supports selection of multiple built in or user created user groups List of Access Time Profile and user account s assigned Report R SEC011 E L Function Description Under the Access Control Info report category this report lists out the user account s of any Internet Access Time Profile s 4 Pre requisites Adobe Acrobat Reader and Microsoft Office should be installed in the workstation in order to view the report User Procedures 1 Select List of Access Time Profile and user account s assigned Report from the report selection page Click on the template link to go to the report parameter screen Copyright 2007 Education Bureau The Government of the HKSAR Page 92 All Rights Reserved WebSAMS User Manual Version 1 3 S SEC09 12 Security gt Report amp Log gt Report List of Access Time Profile and user account s assigned Report R SEC011 E Built in Template c Internet Access Time Profile Profile Description PARENT Built in profile for Parent user type Built in STAFF_OR_OTHERS Built in profile for Staff or Other user type Built in j STUDENT Built in prof
6. 123cds Password MEERN Enter New Password Re enter New Password Password Expiry Never Expire or EPLI Date English User Name Testing Acc Chinese User Name Login Language Chinese v User Account Access Time Actual access time is also subject to System Access Time setting Monday Saturday 06 00 ta 23 00 24 Hours aky 06 00 To 18 00 24 Hours Account Expiry Account Expiry Date Never Expire DDIMMIYYYY User Group Attached E s sTEM_ADMIN Attach Group Detach Group Internet Access Time Profile Attached STAFF_OR_OTHERS Attach Profile Detach Profile M reset J Save Back 3 Edit the user account information as required For details of the user account information refer to the section Create Individual Account 4 The password of the user account can be changed by entering the new password twice The next time the user account login the new password has to be used 5 To attach user groups to the account i Click Attach Group button ii Check the box es to select the group s to be attached in the pop up screen Copyright 2007 Education Bureau The Government of the HKSAR Page 26 All Rights Reserved WebSAMS User Manual Version 1 3 Attach User Group S SEC03 03 Security gt User Account gt Create Individual Account
7. Guardian Phone No HKID No STAFF STF e Retrieve Staff Code and Staff Name LQ SECO09 Report English amp Chinese e Report Management RPT Retrieve related report template L SEC08 Audit Trail SEC21 Staff Audit Trail SEC20 FMP Audit Trail e ALL Modules e Retrieve audit trail records Copyright 2007 Education Bureau The Government of the HKSAR Page 5 All Rights Reserved WebSAMS User Manual Version 1 3 2 Operation Procedures 2 1 Access Control 2 1 1 User Group Maintenance Users can add modify copy and delete a user group and its access rights by the User Group Maintenance function The following diagram illustrates the general concept of a User Group MaintainUser Account User Group MaintainSchool Info Users can be assigned to multiple user groups The following diagram illustrates the concept FMP User Senior Teacher NA CDS Administrator TTL User Copyright 2007 Education Bureau The Government of the HKSAR Page 6 All Rights Reserved WebSAMS User Manual Version 1 3 B B Add User Group Function Description User can add a new user group through the User Group Maintenance function Pre requisites N A User Procedures 1 Click Security gt Access Control gt User Group on the left menu 2 A list of groups is shown click the Add button at the bottom of the page to add a new user group 3 Fill in the Group ID
8. S SEC22 07 and show the message The following User Account s is are found in the Internet Access Time Profile lt Profile ID1 Profile Description1 gt you want to delete If you still want to delete this Internet Access Time Profile please click on the Confirm button The User Account s will be first detached from the Internet Access Time Profile and then the Internet Access Time Profile will be deleted S SEC22 07 Security gt Access Control gt Internet Access Time Profile Delete Internet Access Time Profile The following User Account s is are found in the Internet Access Time Profile one_hour one_hour you want to delete If you still want to delete this Internet Access Time Profile please click on the Confirm button The User Account s will be first detached from the Internet Access Time Profile and then the internet Access Time Profile will be deleted User ID User Name Chinese User Name User Type sensuser fsemsuser ites The following User Account s is are found in the Internet Access Time Profile STUDENT2 STUDENT2 you want to delete If you still want to delete this Internet Access Time Profile please click on the Confirm button The User Account s will be first detached from the Internet Access Time Profile and then the Internet Access Time Profile will be deleted User ID User Name Chinese User Name User Type panna feck teu A 2 After user click Confirm button user account s will b
9. Select the archived file to be downloaded deleted Click the file name link to download Check the check box on the left of the file name and click Delete button to delete the file LQ Post effects 1 The archived audit trail stored as a physical file in ZIP format in the directory will be physically removed from the WebSAMS server 2 A new audit trail record recording the deletion action of the Archived Audit Trail file will be created LX Notes 1 The audit trail of the FMP module can only be downloaded or deleted by users of the SCHOOL_HEAD user group 2 Archived audit trail files are in ZIP format After unzipping the original archived audit trail file is in MS Excel CSV format 3 A link will be provided for downloading the archived audit trail files if the user logins from the SAMS LAN Segment Outside SAMS LAN Segment i e ITED LAN or Internet the link will not be available 4 For Primary AM and Primary PM schools each having its own WebSAMS server the two schools actually share the same FMP data set and the FMP information is stored in the Primary AM WebSAMS server The delete archived audit trail action must be done in the Primary AM WebSAMS and cannot be done in the Primary PM WebSAMS because it does not contain the FMP data Copyright 2007 Education Bureau The Government of the HKSAR Page 79 All Rights Reserved WebSAMS User Manual Version 1 3 2 3 4 Report Select Report Template B Fu
10. gt User Group gt Add Account to Group Add Account to Group Group ID IT_Staff Group Description IT Staff User Group Select User Type Staff Others The following accounts have been added to the above group mathan Nathan Staff NUCSANS STAFFO062 Staff Test7248 hong kong Staff testnineeight testnineeight Staff Note 1 When Student and Parent accounts are created STUDENT group and PARENT group are respectively attached to them automatically 2 Any other user groups cannot be attached to Student and Parent accounts 4 Select the user accounts to be deleted by checking the box beside the User ID link 5 Click Delete button Li Post effects Copyright 2007 Education Bureau The Government of the HKSAR Page 16 All Rights Reserved WebSAMS User Manual Version 1 3 User accounts will be removed from the user group The access rights of that group are not applicable to the user accounts anymore The change will take effect at the user s next login B Notes The built in user account sysadmin belongs to the SYSTEM_ADMIN group but it cannot be removed from the group Copyright 2007 Education Bureau The Government of the HKSAR Page 17 All Rights Reserved WebSAMS User Manual Version 1 3 2 1 2 Special Team Maintenance Assessment score entry is only available to Subject Teacher Class Teacher or members of the Scor
11. o A studenttest studenttest Others FA sysadmin System Administrator PRES sysadmin T teacher36 STAFF FIVE THREE ZERO en Staff 3 A list of user accounts is shown Check the check box es to select the user account s to remove 4 Click Delete button Li Post effects User accounts will be removed from the special user group of Student Data Access Control Team L Notes N A Student Data Access Control Option A Function Description User can select which of the pre defined user groups or user types to have the rights to maintain student data through the Special Team Maintenance function B Pre requisites N A User Procedures Copyright 2007 Education Bureau The Government of the HKSAR Page 23 All Rights Reserved WebSAMS User Manual Version 1 3 Click Security gt Access Control gt Special Team on the left menu Click Student Data Access Control Option tab Check the check box es to set which user groups or user types to have the rights to maintain student data S SEC11 06 Security gt Access Control gt Special Team gt Student Data Access Control Option Sdent Data Access Control Option Student Data Access Control Option by Class Teacher by Clerk by School Head by Student Data Access Control Team J Sis by WebSAMS System Administrator Ss Note Clerk School Head and WebSAMS System Administrator are User Group
12. 0 es a testsams TEST STAFF PREFS oh Tae m testslp testuser Others 3 Check the check box es to select the user account s to be deleted L Click Delete button Post effects Deletion will take effect immediately and the user account if currently logging in will be logged out from the system at once LJ Notes 1 The two built in accounts sysadmin and asysadmin cannot be searched out and hence cannot be deleted from the system 2 When a user is deleted the relevant group memberships are also removed from the system 3 For Student Parent account School Year option will be provided And once IYP is started next school year option will be provided in field School Year Reset Password A Function Description User can reset a user account s password through the User Account Maintenance function L Pre requisites The user account exists User Procedures 1 Click Security gt Access Control gt User Account on the left menu Copyright 2007 Education Bureau The Government of the HKSAR Page 29 All Rights Reserved WebSAMS User Manual Version 1 3 2 Enter the search criteria Click Search button to list the corresponding accounts 3 Check the check box es to select the user account s to be reset password 4 Click Reset Password button Li Post effects 1 The selected user account s password will be reset The new passwords are generated by system
13. 2007 Education Bureau The Government of the HKSAR Page 2 All Rights Reserved WebSAMS User Manual Version 1 3 1 3 Flow Diagram Security Module System Configuration IP Configuration Location Access Control Audit Trail Report amp Maintenance Log Internet Access Time Profile User Group Maintenance User Account Maintenance Copyright 2007 Education Bureau The Government of the HKSAR Page 3 All Rights Reserved WebSAMS User Manual Version 1 3 1 4 Interactions with other modules SEC SCH SECO3 Add user account SEC04 Modify user account SEC22 Internet Access Time Profile STU SECO3 Add Student Parent user account SEC04 Modify Student Parent user account STF SECO3 Add Staff user account SEC04 Modify Staff user account SEC21 Staff Audit Trail RPT SECO9 Report English amp Chinese FMP SEC20 FMP Audit Trail All Modules SECO8 Audit Trail Copyright 2007 Education Bureau The Government of the HKSAR Page 4 All Rights Reserved WebSAMS User Manual Version 1 3 LO SEC03 Add user account SEC04 Modify user account SEC22 Internet Access Time Profile SCHOOL SCH Retrieve school level session class information STUDENT STU e Retrieve Student Registration Number Retrieve Guardian Information Retrieve Student
14. Backup log file path The server backup and recovery log can be viewed in WebSAMS This is the specific file path directory where the server backup recovery operation log files are stored The actual file path applicable is different for different backup tools used There is no default file path Copyright 2007 Education Bureau The Government of the HKSAR Page 57 All Rights Reserved WebSAMS User Manual Version 1 3 12 Archive file path The file path where the system archive files e g archived audit trail will be stored There is no default file path 13 System access time inside SAMS LAN segment It is the service time of the WebSAMS system for users logging in from the SAMS LAN Segment All users except the system administrator account sysadmin can only login the system within the time period defined The start and end service time for both Monday Saturday and Sunday are in 24 hour time format HH MM A 24 Hours button is provided for setting the access time to 24 hours a day The default value is 07 00 23 00 for Monday Saturday and 07 00 18 00 for Sunday If the time range is set as 07 00 01 00 it means that the service time is from 7a m in the morning to 1a m of the next day 14 System access time outside SAMS LAN segment It is the service time of the WebSAMS system for users logging in from the ITED LAN segment or via the Internet All users except the system
15. Create Student Parent Account ssessesseseeessseeseseesreseessestesstsnesstestestestestessesessessreseeseesteseets 35 2 1 4 Location Access Control Maintenance nsassseseaaensennennsoaseseisseeesreeseeseesreseerre seeen 38 2 1 5 Unlock Account reese eh vices seat eR EE UB d TESLA N ANTE TREN 41 2 1 6 Login SAUS crr a 3 haces Rian eit es Goa ak sched he 0s E GE A Sana Cea Babak G EES 42 2 1 7 Maintain Internet Access Time Profile cccccccccccccccccccececsescetscetuceeeseeuecneeenseeneeenseseseenaes 43 Add Internet Access Time Profile c ccceccccssecssecsseceneceseceseceeeeeeeesceceseeeseecsaecaaecsaecnseenseenaeenes 43 Copy Internet Access Time Profile ccccecccccsecssecssecssecesecesecesecesecseeeseeeseneceeeeeseeeaeeeaeeeaeenaees 45 Edit Internet Access Time Profile ccccccsccssscssscesseeeseeeseeeseeeseecseecaecaeceaeenseesseeseeeeeneeeseenaes 46 View Internet Access Time Profile cccecccccessesscesseeeeceeseeeseeescecsaecaecaecesecsseeseeseeeseneeeneenaes 48 Delete Internet Access Time Profile ccccccceeccsssceseeeseeeseeeseeeseecseecaeceaecesecnaeeneeseeeseeeenseenses 48 Add Accountto Profiles srren al vedid sath vesieekenekloge eee st veri O A R a 50 Delete Account from Internet Access Time Profile ccccecccecsseesseceteceteceseceeceeeeseeeeeneeeneenaes 53 22 CONFIGURATION oeiee enen e e a recut ohio cna odincte ated lent ceca tatadas a e 54 221 System Configuration Maintenance ccccccec
16. EEEE 12 Add User Accounts to Existing User Group ccccesccesccessceseceeeceeeeeeseeeseeeseeesaecsaecuecsseenseenseenas 14 Remove User Accounts from Existing User Group ccccccccsseesseestecstecseceeeeseeeeeeeeeeeeneeeneennes 16 2 1 2 Special Team Maintenance o ccccccccccccccccccccccceccceee cece ne cece ence eens eens eens conse cnet ena e eee ee eee eaaeeaaee 18 Add User Accounts to Score Capture Team ccccccsccessssssceeeceeeeeeseeeseeesseesaecsaectecsaeenseenseenes 18 Delete User Accounts from Score Capture Team ccccccsecsseessecssecseceecesecneeseeseeeeseeeeeneennes 19 Capture Score OptiOn ccccsccsscesecesecsseeseceseeeseeeeecaecssecsecesecesecesecseeeseeeseeeseseseseeeseecaeecaeensees 20 Add User Accounts to Student Data Access Control Team cccccecccecsceeseeensesteeenseenseesteeseens 21 Delete Users Accounts from Student Data Access Control Team ceccccceseeteeetseeteeeseeeees 22 Student Data Access Control Option ccccccccecceesseesseeeceeseeeseecsseceseceseceseeseeeseeeeeseseseeeseeesaeeaaees 23 2 1 3 User Account Maintenance 0 eccccccceceeecceeneetece E R OARE E E aS RE 25 Modify User Account Information sssssesseseoseeseeseesseseessesesstertsstesseseestesttssesessessesstesrsseessesees 25 Delete User ACCOumttis ii raa tearena erea a eaaa a at telats nested ask aaaea a ea te e aaa ts 28 Reset Password AEE E A A AEA A 29 Create Individual Account oeer eSa a TEE EEE Ta E ENEE ASS 30
17. SEC22 02 Security gt Access Control gt Internet Access Time Profile gt Profile Details Internet Access Time Profile Add Internet Access Time Profile Internet Access Time Profile Profile Description Chinese Profile Description Oa All From DD MMIYYYY fo DD MMIYYYY E Monday Friday From 24 Hours DD MMIYYYY To 0 J To L DDIMMIYYYY E Saturday From 24 Hours DDIMMIYYYY To v 0 To 0 K DD MM YYYY Sunday From 24 Hours DDIMMIYYYY To z 0 7 To 0 DD MMIYYYY Note 1 Length of Internet Access Time Profile 1 20 characters 2 Internet Access Time Profile can contain only the characters of a z A Z 0 9 or 3 Fill in the Internet Access Time Profile ID Internet Access Time Profile Description and Internet Access Time Chinese Profile Description for the new profile 4 Click Save button 5 Click Reset button to reset all the inputted data 6 Click Back button to go back to S SEC04 01 LI Post effects 1 Ifuser click Save button a message Record s saved successfully will be displayed at the top of the screen S SEC04 02 2 A new Internet Access Time Profile will be created Copyright 2007 Education Bureau The Government of the HKSAR Page 44 All Rights Reserved WebSAMS User Manual Version 1 3 L Notes NIL Copy Internet Access Time Profile L Func
18. The school can define the exact function rights that can be accessed outside SAMS LAN Segment for instance allow viewing but deny editing System Configuration comprises WebSAMS system settings and customisation The school can set up specific access control options function access settings system file paths location access control E Mail settings and other options In addition the school can customise the look and feel of its WebSAMS Audit Trail amp Log allows the user to view archive and delete the audit trail and other log records generated by the system View functions for the database backup log and server backup log are also provided The system also provides a comprehensive set of reports to allow the school to check the access rights of various users and groups from inside and outside the trusted network The school can also view reports on the successful and failed login attempts of the users Copyright 2007 Education Bureau The Government of the HKSAR Page 1 All Rights Reserved WebSAMS User Manual Version 1 3 1 2 Function Chart Security SEC Access Control Configuration Report amp Log User Group Special Team User Account Location Access Control Internet Access Time Profile Unlock Account Login Status System Configuration IP Configuration System Customization Audit Trail Staff Audit Trail FMP Audit Trail Report Purge Log View Backup Log Copyright
19. abcdefgh Others m carlawang carlawang Others m cdschan CDS CHAN Others cdskwsoo cdskwsoo Others m cdsthomas cdsthomas Others m cdsthomas01 cdsthomas Others m choonmeng choonmeng Others m cyrusadmin cyrusadmin Staff m dennywoo Denny Others 4 Check the check box es to select user account s to add to the group 5 Click Save button L Post effects User accounts will be added to the special group of Student Data Access Control Team L Notes Members of the Student Data Access Control Team will have full rights to maintain student data if the option of by Student Data Access Control Team has been checked in the Student Data Access Control Option page Delete Users Accounts from Student Data Access Control Team O Function Description Copyright 2007 Education Bureau The Government of the HKSAR Page 22 All Rights Reserved WebSAMS User Manual Version 1 3 User can remove user accounts from the Student Data Access Control Team through the Special Team Maintenance function L Pre requisites The user is a member of this group Yi User Procedures 1 Click Security gt Access Control gt Special Team on the left menu 2 Click Student Data Access Control Team tab S SEC11 04 Security gt Access Control gt Special Team gt Student Data Access Control Team Student Data Access Control Team English User Name Chinese User Name ype HKEAAAL HKEAA AL User Others
20. administrator account sysadmin can only login the system within the time period defined The start and end service time for both Monday Saturday and Sunday are in 24 hour time format HH MM A 24 Hours button is provided for setting the access time to 24 hours a day The default value is 07 00 23 00 for Monday Saturday and 07 00 23 00 for Sunday If the time range is set to 07 00 01 00 it means that the service time is from 7a m in the morning to 1a m of the next day 15 Release of Access Time Control to 24 Hours The three account types of Staff Student and Parent can be selected to enjoy round the clock access to the system within a certain period for operation purpose The release of access time is confined to the period defined by the dates entered in the From and To fields No default value is set 16 Enable E Mail Function The mail sending functions in WebSAMS can be enabled or disabled by this master setting 17 School s E Mail Address for Return of E Mail by Recipients It is the school s E Mail address displayed as sender s E Mail address in outgoing mails for recipients to reply E Mails to the school If the school wants to use another E Mail account to receive E Mail replies this E Mail address has to be changed accordingly If e Certificate for digital signature is not available in the WebSAMS server this field is mandatory Copyright 2007 Education Bureau The Go
21. changes LX Post effects 1 The access rights are updated accordingly and will be effective upon the affected users next login 2 If a user does not have the access rights to a function the corresponding function will not be shown at the left menu or the corresponding tab will not be shown in the main page 3 If a user does not have the action access right to an action such as Delete the corresponding action button i e Delete button will be dimmed When the dimmed button is clicked there will be no response L Notes 1 In the access right table Symbol X represents that the specific right has been granted while symbol represents that the specific right does not exist If the specific right has not been granted no symbol will be displayed in the cell of the table 2 If any of the Add Edit Delete Execute right is granted to the group the View right will be automatically granted However for some functions the setting of View Right is not available e g the Plan New School Year function in School Management 3 For module specific built in user groups only the relevant modules are available for setting access rights e g only the CDS module is available for CDS_ADMIN user group Add User Accounts to Existing User Group 4 Function Description Users can add user accounts to an existing user group through the User Group Maintenance function 4 Pre requisites Only the user accounts that are not y
22. generate the report Copyright 2007 Education Bureau The Government of the HKSAR Page 85 All Rights Reserved WebSAMS User Manual Version 1 3 Li Post effects The report will be displayed in a pop up window which allows user to preview or print it out L Notes All login attempt records are stored in the system The Login Date amp Time User ID User Name User Type and User Code of the successful login attempts are shown in the report Unsuccessful Login Log Report R SEC005 Q Function Description Under the Login Log report category this report lists out the details of any unsuccessful login attempts B Pre requisites Adobe Acrobat Reader and Microsoft Office should be installed in the workstation in order to view the report User Procedures 1 Select Unsuccessful Login Log Report from the report selection page Click on the template link to go to the report parameter screen S SEC09 06 Security gt Report amp Log gt Report Unsuccessful Login Log R SEC005 E Built in Template Please input the print criteria Date Range From To DD MMIYYYY DD MMIYYYY 05 08 2015 05 08 2015 Format PIF v 2 Specify the date range within which all the unsuccessful login attempts will be included in the report 3 Select the format of the report to be one of PDF Word RTF Excel Click Preview amp Print button to generate the report Post effects B The rep
23. oo ce cecceceescessssececeeseeeeceaecaeeecaecaeseceaecaaeeneeeeceaeeaeeeeaecaeeeneeaeenee 78 2 3 4 Repollo eke Gea EE R REE SN OR eV ES ORS CR AT 80 Select Report Pf eiiplates issetccerscshevasvesasesascaae ii a E EON E O EEA T cogeedt 80 User Account List by User Group Report R SEC001 cceeccccesseeeteceteceeeeseceeeeeeeeeeeeeseeenses 81 User Account Profile Report R SECO02 ccccecccessessseeseeeseeeseeeseecseecesecesecnseeseeseeeseeeeeneeeaes 82 User Group Access Rights Report R SEC003 ccccecccecssecseeseeseessecnsecesecnseeeseeeeeeeeeeeeseeenes 83 Successful Login Log Report R SECO04 cecccssecsseessecsteceeceseceseenseeeeeeseeeeeneeeseeeaeeeaeentees 85 Unsuccessful Login Log Report R SEC005 ccccscesssessseesseeseeeseecsseceaecnsecnseeneeeseeeseneeeneeeaes 86 List of functions that can be accessed outside SAMS LAN Segment Report R SEC007 87 List of functions that can be accessed by User Account outside SAMS LAN Segment Report RSE COO Rides cues ey Helo era tet ae eg ncaa eRe ead EE ees tn Wha accra he si 88 List of functions that can be accessed by User Group outside SAMS LAN Segment Report R SE GOOD ss ccssiccs sash eos apevncss eves cos E E A 90 List of Access Time Profile and user account s assigned Report R SECO11 E ee 92 2 3 5 PUPS CLOO ina s Anes tidcts AC ENA E GH A EEES ha ed A 94 2 3 6 View BACKUP LOG cistet i Gae RE RTTE EEE RER EEE Biase ances 95 Copyright 2007 Educat
24. report to be one of PDF Word RTF Excel Click Preview amp Print button to produce the report LO Post effects The report will be displayed in a pop up window which allows user to preview or print it out LJ Notes 1 The User ID User Name User Code User Type Login Language Account Expiry Information Password Expiry Information Last Login Time User Account Access Time and the attached user groups of each user account are shown 2 Report supports selection of multiple user accounts User Group Access Rights Report R SEC003 A Function Description Under the Access Control Information report category this report lists out the access rights of user groups inside the SAMS LAN segment i e within the trusted network Copyright 2007 Education Bureau The Government of the HKSAR All Rights Reserved Page 83 WebSAMS User Manual Version 1 3 L Pre requisites Adobe Acrobat Reader and Microsoft Office should be installed in the workstation in order to view the report User Procedures 1 Select User Group Access Rights Report from the report selection page Click on the template link to go to the report parameter screen S SEC09 11 Security gt Report amp Log gt Report User Group Access Rights R SEC003 E Built in Template 7 Bottom EI m SYSTEM_ADMIN WebSAMS System Administrator Built in m SCHOOL_HEAD S
25. rm Be ABC HSS User created m Paida Daniel User created Ee passe rewarcoe Tusa Top Format PDF X Copyright 2007 Education Bureau The Government of the HKSAR Page 91 All Rights Reserved WebSAMS User Manual Version 1 3 2 Check the check box es on the left of the user group s to list in the report 3 Select the format of the report to be one of PDF Word RTF Excel 4 Click Preview amp Print button to generate the report Li Post effects The report will be displayed in a pop up window which allows user to preview or print it out L Notes 1 The report shows the accessibility of functions by user group outside SAMS LAN Segment 2 The master settings of access from the Internet and from ITED LAN Segment are listed at the beginning of the report Besides having the accessibility of functions these master settings must be turned on before the users of a user group can actually access the function from Internet or from ITED LAN Segment 3 The View Edit Add Delete amp Execute rights to every function of the selected user groups are shown For built in groups all functions under the applicable modules will be listed and functions under those non applicable modules will not be shown For user created groups all modules functions will be listed except functions under the Customization module 4 Access right setting of Y means having access rights outside SAMS LAN segment
26. table should be same as those defined in the system property file which records the subnet information of the ITED LAN Segment Otherwise the system will prompt errors when the user tries to save the record of the IP group Copyright 2007 Education Bureau The Government of the HKSAR Page 62 All Rights Reserved WebSAMS User Manual Version 1 3 B B 2 Each IP group should have a unique name It may contain two IP lists one is IP Address Range while the other is Excluding IP Address Range Both ranges should have the same subnet values The Excluding IP Address Range allows a segment of IP addresses in the IP Range to be excluded from the group 3 IP Address Range in one IP group should not fall into the Excluding IP address Range in another IP group For example the IP Address Range in one group is 10 15 33 100 10 15 33 105 while the Excluding IP address Range in another IP group is 10 15 33 95 10 15 33 120 This will cause conflict and the system will prompt the user to re enter a valid IP Address Range Delete IP Group Function Description A User can delete an IP Group through the IP Configuration Maintenance function Pre requisites The IP Group exists User Procedures 1 Click Security gt Configuration gt IP Config on the left menu S SEC06 01 Security gt Configuration gt IP Configuration Record s added successfully To allow certain workstations in th
27. the system administrator to unlock the account 3 A locked account may be unlocked automatically after the elapse of the auto unlock period if automatic unlocking of accounts has been set in the System Configuration function 4 If the sysadmin account has been locked it can still login to WebSAMS if the login is carried out in the WebSAMS server directly After the successful login the account will be unlocked at the same time Copyright 2007 Education Bureau The Government of the HKSAR Page 41 All Rights Reserved WebSAMS User Manual Version 1 3 2 1 6 Login Status A Function Description User can view the status of all user accounts logging in the system through the Login Status function Besides this function can be used to force user accounts s to logout from the system fj Pre requisites N A User Procedures Click Security gt Access Control gt Login Status on the left menu 2 A snapshot of all the user accounts who have logged in the system are shown 3 Check the box es to select the user account s to be logged out of the system S SEC14 01 Security gt Access Control gt Login Status The following information of User Account s logging in WwebSAMS is are as at 03 01 2003 Fri 10 32 38 English Chinese Login Time i Login Assigned User Group User User i outside Name Name l SAMS LAN segment T sysadmin sysadmin sy
28. this function However they can be detached here WEKKKKEK 9 The existing user password will be displayed as and thus even the system administrator cannot read the existing user password 10 If the password is going to expire within 14 days user will be warned after login 11 The function access rights of individual user account are based on the user group s attached Delete User Account B Function Description User can delete a user account through the User Account Maintenance function L Pre requisites The user account exists wf User Procedures 1 Click Security gt Access Control gt User Account on the left menu 2 Enter the search criteria Click Search button to list the corresponding accounts Copyright 2007 Education Bureau The Government of the HKSAR Page 28 All Rights Reserved WebSAMS User Manual Version 1 3 S SEC04 01 Security gt Access Control gt User Account gt Search User Account User Type staff others Student Parent All School Level Session For data access control for Staff and Others accounts School Level All X School Session All X User ID For login use tests User Code Staff Code for Staff User Type Student Registration No for Student Parent User Type and Not Applicable for Others User Type User Name English or Chinese User Group X aca cae all O active Expired ER Search 9 Reset
29. 01 Security gt Access Control gt Special Team gt Score Capture Team Score Capture Team Bottom Fm usero Enaish userName Chinese UserName UserType gt sec_wd_sen_ eteni Chan tai man sec_wd_sen_tcher2 Chan tai man eS Staff sec_wd_sen_tcher3 Chan tai man PASS Staff Spa_teacher SPA Teacher Sebi Staff m staff710 STAFF SEVEN ONE ZERO een L S Staff staff_two STAFF TWO aah Staff staff test STAFF NINE Exe AL Staff Top Copyright 2007 Education Bureau The Government of the HKSAR Page 18 All Rights Reserved WebSAMS User Manual Version 1 3 2 A list of user accounts who are group members is shown click Add button to add new members to the group S SEC11 02 Security gt Access Control gt Special Team gt Score Capture Team Add User Account to Score Capture Team M Page 1_7 of 2 M Bottom fm user username _ ChineseUserName user Twe _ m jaaaaaa aaaaaa Others TT jabcdet abcdef Others m jabcdety abcdefg Others abcdefgh abcdefgh Others m carlawang carlawang Others 7 edschan CDS CHAN Others I cdskwsoo cdskwsoo Others m cdsthomas cdsthomas Others m cdsthomas01 cdsthomas Others 7 choonmeng choonmeng Others m cyrusadmin cyrusadmin Staff TT dennywoo Denny Others 7 enochng Enoch Ng Others M fmp_user01 fmp_user01 Others m fmp_user02 fmp_user02 Others m fmpadmin frp Others SS EEEE as 3 Check the chec
30. 07 Education Bureau The Government of the HKSAR Page 8 All Rights Reserved WebSAMS User Manual Version 1 3 Li Post effects 1 Changes to the user Group Description and Chinese Group Description would be updated 2 As user group is used to grant access rights to users any changes in the access right settings in a user group will affect the access rights of all the users belonging to the group New rights will be effective when the affected users login the system the next time B Notes The Group ID cannot be updated 2 The assistant system administrator account asysadmin has access right to perform one and only one function changing the system administrator s i e the sysadmin account password This right is built in the system and cannot be modified and cannot be granted to any other user groups 3 Some functions for instance Staff Audit Trail and FMP Audit Trail functions under Security module are only available to the SCHOOL_HEAD user group The system will ensure that access rights of these restricted functions cannot be granted to all other user groups 4 For all built in user groups only the access rights of the relevant modules functions can be maintained For example for the STUDENT or PARENT user groups only the pre defined set of functions modules are listed for access rights maintenance 5 For user defined user groups access rights of all modules functions except the restri
31. 4 Click Save button L Post effects Only members of those selected user groups or user types have the rights to maintain student data LJ Notes 1 Class Teacher can access the student data of his her class only 2 If the Student Data Access Control Team has been checked members of this special user group will have the full rights to maintain all student data Copyright 2007 Education Bureau The Government of the HKSAR Page 24 All Rights Reserved WebSAMS User Manual Version 1 3 2 1 3 User Account Maintenance A user can add modify and delete a user account by the following functions e Create Individual Account create a user account for Staff Student Parent or Others user type by entering the details manually e Create Student Parent Account create student parent accounts by batch e Search a User Account for deletion and modification Modify User Account Information B Function Description A user can modify the information of a user account through the User Account Maintenance function Lj Pre requisites The user account exists User Procedures 1 Click Security gt Access Control gt User Account on the left menu 2 Fill in the search criteria Click Search button S SEC04 01 Security gt Access Control gt User Account gt Search User Account Search User Account User Type Staff Others Student Parent All School
32. AFF IT Staff User Group you want to delete If you still want to delete this User Group please click on the Delete button The User Account s will be first detached from the User Group and then the User Group will be deleted Chinese User Name master cds master Others 5 Click Delete button to confirm deletion of the group LI Post effects The user groups will be removed All user accounts in the deleted user groups will be removed from the user groups first B Notes All built in user groups e g STUDENT cannot be deleted and error message Built in user group cannot be deleted will be shown Access Right Maintenance A Function Description The access rights of functions modules for a user group can be maintained through the User Group Maintenance function B Pre requisites User group exists User Procedures 1 Click Security gt Access Control gt User Group on the left menu 2 Select the User Group by clicking on the Group ID link 3 Module Function list will be displayed Copyright 2007 Education Bureau The Government of the HKSAR Page 12 All Rights Reserved WebSAMS User Manual Version 1 3 4 5 S SEC02 03 Security gt Access Control gt User Group gt Access Right Access Right Group ID IT_Staff Group Description IT Staff User Group Please click on the link of Module to edit the access rights or click gt to display the list of access r
33. All Rights Reserved WebSAMS User Manual Version 1 3 1 Click Security gt Access Control gt User Account on the left menu 2 Click Create Individual A C tab 3 Fill in the details of the account to be created S SEC03 01 Security gt Access Control gt User Account gt Create Individual Account Create Individual Account School Level Session For data access control for Staff and Others accounts only School Level ll School Session All User Type gt Staff Student Parent 6 Others User Code Staff Code for Staff User Type Student Registration No for Student Parent Us x Type and Not Applicable for Others User Type User ID For login use Password Password Expiry A Password Expiry Date Qo Never Expire gt DDIMMIYYYY 21 10 2011 English User Name Chinese User Name Login Language Chinese v User Account Access Time Actual access time is also subject to System Access Time setting Monday Saturday o6 00 l Tr 23 0 24 Hours Sunday 06 0 T 18 0 24 Hours Account Expiry ee aie Account Expiry Date DD MMIYYYY User Group Attached Attach Group Detach Group Internet Access Time Profile Attached E sTAFF_OR_OTHERS Attach Profile Detach Profile rent 4 For Staff Student Parent account click Go to Search button to search for a user code from the existing staff student guardian re
34. Audit Trail stored in server MB e The maximum hard disk space used for storing Archived Audit Trail files in Megabytes e When the assigned hard disk space is full the school can choose to delete the archived files or move the files to other folders manually e Zero value means no limit The default value is 1 MB 27 Size Limit of DB backup recovery operation log stored in server MB e The maximum hard disk space used for storing the database backup recovery log in Megabytes e Zero value means no limit The default value is 1 MB 28 Size Limit of Server backup recovery operation log stored in server MB e The maximum hard disk space used for storing the server backup recovery log in Megabytes e Zero value means no limit The default value is 1 MB Copyright 2007 Education Bureau The Government of the HKSAR Page 60 All Rights Reserved WebSAMS User Manual Version 1 3 2 2 2 IP Configuration Maintenance In the System Configuration function the system administrator can separately enable access to WebSAMS via ITED LAN Segment or via Internet ma Internet Access Default disabled _ i ITED Access Default disabled ainia When a user logins the WebSAMS from a workstation the system can detect whether the login comes from the SAMS LAN Segment If the IP address of this workstation is the same as that of the subnet of the WebSAMS server the login is treated as from SAMS LAN Segme
35. Control of Audit Trail amp Log through the System Configuration Maintenance function L Pre requisites N A 8 User Procedures 1 Click Security gt Configuration gt System Config on the left menu 2 Fill in the details of the settings 3 Click Save button at the bottom of the page S SEC01 01 Security gt Configuration gt System Configuration vBottom General Settings Maximum number of fault login attempts allowed jo Zero for no limitation default value 3 Auto unlock period of locked accounts ji 5 hours Zero for no auto unlock default value 15 hours Automatic logout period inside SAMS LAN Segment iz minutes Maximum 180 minutes default value 15 minutes Automatic logout period outside SAMS LAN Segment jiz minutes Maximum 120 minutes default value 5 minutes Password expiry period o days Zero for no expiry default value 100 days Number of passwords stored in password History j Min 1 Max 5 default value 1 Enable Multiple Login Vv Default disabled Enable Internet Access T Default disabled Enable ITED Access T Default disabled Data Backup log file path E DATAM LOGDEA Server Backup log file path E DATAMLOGSR Archive file path JE DATAQSMNSEC AUD IT Copyright 2007 Education Bureau The Government of the HKSAR Page 54 All Rights Reserved WebSAMS User Manual Version 1 3 System access
36. Group Description and Chinese Group Description for the new group S SEC02 02 Security gt Access Control gt User Group gt Group Description Group Desc Add User Group Group ID Group Description Chinese Group Description Note 1 Length of Group ID 1 20 characters 2 Group ID can contain only the characters of a z A Z 0 9 or _ 4 Click Save button Post effects The user defined user group can be attached to any users The access rights of the user group will then be passed to the users of the user group Access rights granted will be effective the next time the member users login to the system Notes 1 User group created by the user is called user defined user group 2 All user defined user groups can be granted access to all modules functions except some restricted functions e g all functions under the two modules of FMP and Staff This is to exercise strict control on the access of these restricted functions modules to the built in groups only Copyright 2007 Education Bureau The Government of the HKSAR Page 7 All Rights Reserved WebSAMS User Manual Version 1 3 3 Under Chinese Language the Chinese Group Description field will be displayed in the group selection drop down for selection If this field is blank the Group Description will be displayed instead Update User Group A Function Description A user can modify an existing user group s description access rights an
37. LAN or Internet the link will not be available Copyright 2007 Education Bureau The Government of the HKSAR Page 75 All Rights Reserved WebSAMS User Manual Version 1 3 2 3 3 FMP Audit Trail This function allows a user to view or download the FMP audit trail which records the important transactions related to FMP module The user can also choose to archive the audit trail records into audit trail files when the system is running out of disk space After the archive action the corresponding audit trail records will be deleted from the database so as to release disk space In addition user can also download or delete the archived audit trail files View Audit Trail LJ Function Description User can view or download the audit trail which records the daily transactions user group assignment or access right maintenance of FMP module through the FMP Audit Trail function B Pre requisites The FMP audit trail records the access to functions and all updates made to sensitive data related to FMP module In each audit trail record information such as user ID time stamp name of the function accessed action performed before image and after image of data will be logged D User Procedures Click Security gt Report amp Log gt FMP Audit Trail on the left menu Click View tab Select Audit Trail Type to be viewed S SEC20 01 Security gt Report amp Log gt FMP Audit Trail gt View view A autt Te
38. Level Session For data access control for Staff and Others accounts School Level Secondary School Session Whole Day w User ID For login use User Code Staff Code for Staff User Type Student Registration No for Student Parent User Type and Not Applicable for Others User Type User Name English or Chinese User Group IT Staff User Group v Account Status ll Odctive Expired UserID English User Name Chines lt user Name User Type nathan Nathan 2000 Staff NUCSAMS STAFFOOQ6 9442 Staff Test7248 hong kong HE Staff ltestnineeight_ testnineeight K Staff Reset Password Note Passwords of the user accounts are reset and generated by system Please refer to the report for details The report generated will be filed to Report Management gt Repository Copyright 2007 Education Bureau The Government of the HKSAR Page 25 All Rights Reserved WebSAMS User Manual Version 1 3 Click on the User ID link for the user account information to be modified Latest Login Time 12 11 2010 15 19 School Level Session For data access control for Staff and Others accounts only School Level All X School Session All User Type Staff a Student a Parent Others User Code Staff Code for Staff User Type Student Registration No for Student Parent User Type and Not Applicable for Others User Type User ID For login use
39. Procedures Click Security gt Report amp Log gt FMP Audit Trail on the left menu Click Archive tab Select Audit Trail Type to archive e Dra Fill in the date range of the FMP audit trails to be archived S SEC20 02 Security gt Report amp Log gt FMP Audit Trail gt Archive Pama archive Yo Audit Trail Type Daily Transaction Log C User Group Assignment Log C Access Rights Maintenance Log From 22 11 2002 DDAMMYYY Y To foaio4r2003 DDMMAY YYY 5 Click Save button Copyright 2007 Education Bureau The Government of the HKSAR Page 77 All Rights Reserved WebSAMS User Manual Version 1 3 Li Post effects 1 Audit trail records that have been archived cannot be restored to WebSAMS system 2 Audit trail records that have been archived will be deleted from the WebSAMS database permanently and cannot be enquired from the WebSAMS online system anymore 3 Archived audit trail files are in ZIP format After unzipping the original file is in MS Excel CSV format 4 Anew audit trail record recording the archive action will be created B Notes 1 The audit trail of the FMP module can only be archived by users of the SCHOOL_HEAD user group 2 The archive audit trail function can be used when the disk space allocated for audit trails is running out After the archive process the corresponding audit trail records will be deleted from the database 3 The From date is p
40. RIO03 zip 12 04 2003 1102 2003 1203 2003 T9082 21NOV2002_O5FEB2003 zip 05 02 2003 21 10 2002 0502 2003 1 Click Security gt Report amp Log gt Audit Trail on the left menu 2 Click Delete Archived Audit Trail tab 3 Select the archived audit trail file to be downloaded deleted 4 Click the file name link to download 5 Check the check box on the left of the file name and click Delete button to delete the file L Post effects The archived audit trail file stored as a physical file in ZIP format in the archive file directory will be physically removed from the WebSAMS server LJ Notes Copyright 2007 Education Bureau The Government of the HKSAR Page 70 All Rights Reserved WebSAMS User Manual Version 1 3 1 Archived audit trail files are in ZIP format After unzipping the original archived audit trail file is in MS Excel CSV format 2 A link will be provided for downloading the archived audit trail files if the user logins from the SAMS LAN Segment Outside SAMS LAN Segment i e ITED LAN or Internet the link will not be available Copyright 2007 Education Bureau The Government of the HKSAR Page 71 All Rights Reserved WebSAMS User Manual Version 1 3 2 3 2 Staff Audit Trail This function allows a user to view or download the Staff audit trail which records the important transactions related to Staff module The user can also choose to archive the audit trail records into audit trail files
41. Web NSsms USER MANUAL Security Document 27e Copyright 2007 Education Bureau The Government of the HKSAR All Rights Reserved WebSAMS User Manual Version 1 3 Table of Contents 1 MODULE OVERVIEW nisreen sets eeose seeto eeose r oree eo a oS Eut EOIS EE eanu Esten ENSS Sents 1 1 1 INTRODUCTION PAREA EEA O ASA E ETN E A l 1 1 1 Objectivensinieienn ne aaa sss a E E a aaa ee 1 1 2 FUNCTION GHAR A EEEE EASE E AAAA TAAA 2 1 3 FLOW DIAGRAM akase nr E EA A AEEA ET A EEN TET 3 1 4 INTERACTIONS WITH OTHER MODULES cccccecsesesssseceeececsesesseseceeccecsesesssaeeeeeceessnentsaeeeeess 4 Ra Gere a en Den nee eee ee 4 2 OPERATION PROCEDURES soc ccsiscesevss cesenvscavsanosecsvenadveasenasdecsennisossnsseesesssveus soshodenaseenessss sees 6 2 1 ACCESS CONTROL sicds slasisteditedeeas Soaiseta ieededs sosedeseSndodgeesasbiaeeehecdetesanssaee ladedsea Aa E a 6 21 1 User Group Maintenance mni a e E E E E E A A E RS 6 Add U Ser Groupies sctescescs caves cs see cxeulevedos td caducus eeeedts weeuncdazesicelavees sts seteeds aateaslsavieanstevetesulesees Stars 7 Update U ser Group m e na EE AA R ai suns eb O OEE E Pea sentensdeeg EEE EEE AEEA 8 Copy USCC Group sei scasscctesestac tocaa sates oheesesa Pesteees oaadstes does eto saeeavs Lanaanes eshdeata ae EA 10 Delete User Grouper ee vn eases Tee ink erat ideal EERE ieee tar hewn lead 11 Access Right Maintenance ssc ciciee ccc onare see e ee a a S aa a e Ea EEE
42. abase permanently and cannot be enquired from the WebSAMS online system anymore 3 Archived audit trail files are in ZIP format After unzipping the original file is in MS Excel CSV format 4 Anew audit trail record recording the archive action will be created Copyright 2007 Education Bureau The Government of the HKSAR Page 69 All Rights Reserved WebSAMS User Manual Version 1 3 L Notes 1 The archive audit trail function can be used when the disk space allocated for audit trails is running out After the archive process the corresponding audit trail records will be deleted from the database 2 The From date is provided by the system and it is the earliest date audit trail records exist User has to enter the To date Then the audit trails within the date range will be archived 3 A link will be provided for downloading the archived audit trail file if the user logins from the SAMS LAN Segment Outside SAMS LAN Segment i e ITED LAN or Internet the link will not be available Delete Archived Audit Trail A Function Description User can download or delete archived audit trail ZIP files through the Audit Trail function L Pre requisites An archived audit trail file is present User Procedures S SEC08 03 Security gt Report amp Log gt Audit Trail gt Delete Archived Audit Trail Delete Archived Audit Trail E Archive File Name Creation Date Date From P2282 FRB 2005 VM A
43. an have a Parent user account and each student only has one guardian 3 The password will be generated by the system according to the selected Password Option There are four Account Password Options User ID a The password for a Student account will be the same as the User ID i e the Student Registration Number b The password for a Parent account will be the same as the User ID i e G_ Student Registration Number c If a parent has two or more children at the same school different accounts will be created for the parent for different student registration codes Tel No a The password will be the telephone number of the student for a Student account and the telephone number of the guardian for a Parent account HKID a The password will be the HKID number of the student for a Student account and the HKID number of the guardian for a Parent account System Generated a The password will be the generated by the system randomly Copyright 2007 Education Bureau The Government of the HKSAR Page 36 All Rights Reserved WebSAMS User Manual Version 1 3 4 If Tel No or HKID is selected as the Password option and the corresponding information is not available User ID will be used as the password instead No user account will be generated when there is no student parent in the class or all the user accounts of the class have already been created If a new student has been adm
44. an mmm Audit Trail Type Daily Transaction Log C User Group Assignment Log Access Rights Maintenance Log 3 From To DDMMIYYYY DDMMIYYYY faari1 2002 joamara003 iew Fill in the date range of the audit trails to be viewed or downloaded Click View button at the bottom of the page Click Open button to open the file The audit trails will be shown in MS Excel format Li Post effects The audit trail records are presented in a file in MS Excel CSV format Copyright 2007 Education Bureau The Government of the HKSAR Page 76 All Rights Reserved WebSAMS User Manual Version 1 3 L Notes 1 The audit trail of the FMP module can only be viewed by the users of the SCHOOL_HEAD user group 2 There are 3 types of audit trails e FMP Daily Transaction Log records updates to FMP information e User Group Assignment Log records addition removal of user accounts to from the SCHOOL_HEAD group and the 6 built in FMP user groups e Access Rights Maintenance Log records updates to access rights of FMP functions 3 For Primary AM and Primary PM schools each having its own WebSAMS server the FMP information is stored in the Primary AM WebSAMS server and both schools share the same FMP data Archive Audit Trail LJ Function Description User can archive FMP Audit Trail records through the FMP Audit Trail function B Pre requisites FMP Audit Trail records exist User
45. ceseeeeeesetseeeeceseteeeseesecuceeseesecuaeteeerenaeeatens 54 2 2 2 IP Configuration Maintenance ccccecccccceceeceeseeeeeesetseeescuseteeescesecaeeeseesecaeeeeeeasenaeeateates 61 2 2 3 System CUSTOMIZALON miroir scc dances dae paved ca ads Cisse tid Ga ess casas 14a cs Sada See vad ca HENNA Addn aed 64 237 1 w REPORT G2 LOGA e ca vsedagen E Be xsw de suse anegons toons A woke svewn A EES 67 2 3 1 Audi TEC etch Acs terse Nate Meee toto a tet Aes Meine mR ete ct teh Rl tote ott SAB 67 View Audit Tran ssania a E dBak lec rade dss aah eden rb bade a shan deed oi cesta de 67 Archive Audit Prail ccscec cess tebscasiedckct cds a ai acanide dance ielatacetedecaewe ligarse A 69 Copyright 2007 Education Bureau The Government of the HKSAR All Rights Reserved WebSAMS User Manual Version 1 3 Delete Archived Audit Trail 00 0 0 cccccessssssssecseseeeeeecssesaceeeaecaeeeeessecaaeenessecsaeeaceeeeaeeaeeenenaeeuee 70 2 3 2 Staj Audit THAI iror i NAO dane E e Otea ae aaa Bee 72 View Audit Trail eenaa et elie e aE aa ae a tact alent aaa aae aea atetan a Ea RRS Sta 72 Archive Audit Trails seinien in eean Ea e a tra Ea sees E aa ea SN 73 Delete Archived Audit Trail ssia eian eenia aa aeaa a i e a a a aE E a AGa 74 2 3 3 FMR Audit TN Gilat e a O E A E RoI 76 View Audit Trail sa srses krenete reter Kaea enia Lada eneen ade Gages DA eea TET oaei To eSEE ETEA EEE delete 76 ATCHIVeAUGIt Pratl EEE E E EE E N E A A T 77 Delete Archived Audit Trail
46. cess Time b Login is allowed only when the user logins within the overlapping period of the System Access Time and the User Account Access Time c Login permission of 24 hours a day can be set by clicking the 24 Hours button e Account Expiry a A user account cannot login on or after the account expiry date b Account can be set to Never Expire User Groups e STUDENT and PARENT user groups will be attached automatically to the Student and Parent accounts respectively and cannot be detached Copyright 2007 Education Bureau The Government of the HKSAR Page 34 All Rights Reserved WebSAMS User Manual Version 1 3 B e STAFF user group will be automatically attached to Staff user accounts However STAFF group can be detached from a staff account e The two special teams cannot be attached to a user account by this function 3 Search User Code e Once IYP is started next school year option will be provided in field School Year e For Student Parent type when All option is selected in field School Year if student has schooling record in both current or next school year only current year record will be displayed Create Student Parent Account Function Description User can create Student Parent accounts by batch for the whole school or by school year school level session class level or individual class through the User Account Maintenance function Pre r
47. ch Profile button to detach profile s 9 Click Save button to save the changes L Post effects Changes will be effective upon the affected user s next login Expired accounts will not be able to login again LJ Notes 1 Staff Others Accounts will be listed if Staff Others Accounts option is checked in the Search Criteria Copyright 2007 Education Bureau The Government of the HKSAR Page 27 All Rights Reserved WebSAMS User Manual Version 1 3 2 Student Parent Accounts will be listed if Student Parent Accounts option is checked in the Search Criteria 3 For Student Parent account School Year option will be provided And once IYP is started next school year option will be provided in field School Year 4 The two built in accounts sysadmin and asysadmin cannot be searched out and hence the information of these accounts cannot be modified User ID cannot be changed The user account type cannot be changed except that Others type account can be changed to Staff type account 7 Only STUDENT user group is attached to a student account and the group cannot be detached from the account as the Detach Group button is disabled Similarly only PARENT user group is attached to a parent account and the group also cannot be detached 8 The two special teams Score Capture Team and Student Data Access Control Team cannot be attached to the user accounts through
48. chool Head Built in m ALLOCATION_GROUP_PRI Allocation Group Primary Built in m ALLOCATION_GROUP_SEC Allocation Group Secondary Built in m ANP_ADMIN Ayvard and Punishment Team Built in m CDS_ADMIN CDS Administrator Built in m CLERK Clerk Built in rp DM_ADMIN Data Management Administrator Built in pr DM_USER Data Management User Built in m FMP_ACCT_CLERK FMP Accounts Clerk Built in m FMP_ADMIN FMP Administrator Built in m FMP_PETTYCASH_CLERK FMP Petty Cash Clerk Built in m FMP_USERI FMP USER 1 Built in m FMP_USER2 FMP USER 2 Built in m FMP_USER3 FMP USER 3 Built in rp HKEAA HREAA Built in p E Test Security Access Right Test User created m VIEWGROUP VIEW GROUP User created Top Format PDF v 2 Check the check box es on the left of the user group s to list in the report 3 Select the format of the report to be one of PDF Word RTF Excel 4 Click Preview amp Print button to generate the report L Post effects The report will be displayed in a pop up window which allows user to preview or print it out Copyright 2007 Education Bureau The Government of the HKSAR Page 84 All Rights Reserved WebSAMS User Manual Version 1 3 L Notes 1 The report shows the function accessibility inside SAMS LAN segment grouped by user group and by module 2 The setting of the View Edit Add Delete amp Execute rights of the selected user groups for every applicable function are shown For built in gro
49. cords 5 Search for a staff student parent user and select the user code of the user Copyright 2007 Education Bureau The Government of the HKSAR Page 31 All Rights Reserved WebSAMS User Manual Version 1 3 6 7 8 S SEC03 02 Security gt Access Control gt User Account gt Search Search User Code User Name CANDIDATE O O School Year Current Year 2013 v School Level ally School Session all v Class Level 4ll v Class Name All v HKID No fs Only the users with no User Accounts are listed __ School Year English User Name Chinese User Name Ory esr a E Click Add button The user code as well as the user s English and Chinese names will be entered automatically The system will go back to Create Individual Account page To attach a user group to the user account click Attach Group button Check the box to select the user group s to be attached S SEC03 03 Security gt User Account gt Create Individual Account Attach User Group vBottom Cy OOO rl SYSTEM_ADMIN WebSAMS System Administrator Built in TT SCHOOL_HEAD School Head Built in J ALLOCATION_GROUP Allocation Group Built in TT ANP_ADMIN Award and Punishment Team Built in lm CDS_ADMIN CDS Administrator Built in lm CLERK Clerk Built in mM DM_ADMIN Data Management Administrator Built in rl DM_USER Data Manageme
50. cription Under the User Group Account Information report category this report lists out the details of the individual user accounts Pre requisites Adobe Acrobat Reader and Microsoft Office should be installed in the workstation in order to view the report User Procedures 1 Select User Account Profile Report from the report selection page Click on the template link to go to the report parameter screen 2 Specify the search criteria of the user accounts to be listed 3 Click Search button to list out the user accounts Copyright 2007 Education Bureau The Government of the HKSAR Page 82 All Rights Reserved WebSAMS User Manual Version 1 3 4 5 6 S SEC09 04 Security gt Report amp Log gt Report User Account Profile Report R SEC002 E Built in Template Please input the print criteria User Type Staff Others Student Parent All School Level Session For data access control for Staff and Others accounts School Level Secondary School Session Whole Day User ID sec_wd_sen_tcher User Code User Name English or Chinese User Group v Account Status aAll Oadctive Expired Format PDF X oo sec_wd_sen_ Ean tai man STF002 j sec_wd_sen_tcher2 Chan tai man RRX STFOO2 Staff sec_wd_sen_tcher3 Chan tai man BEX STFOO2 Staff Check the check box es on the left of the user s to be listed in the report Select the format of the
51. cted functions and the Staff amp FMP modules can be maintained 6 The four built in user groups for Staff are STAFF STAFF_MANAGEMENT_1 STAFF_MANAGEMENT_2 and STAFF_MANAGEMENT_3 The STAFF_MANAGEMENT_1 user group is granted with all access rights to the modules of Staff and Staff Deployment while the STAFF_MANAGEMENT_2 and STAFF_MANAGEMENT_3 user groups are granted with no access rights The school can customize the access rights of these 3 groups to control access to staff information The STAFF group only has view rights to Staff module functions Similarly there are 6 FMP built in user groups 7 For Student and Parent accounts they are only allowed to be added to the user groups STUDENT amp PARENT respectively 8 STAFF user group can only be assigned to user account of Staff type It cannot be assigned to user account of Others type 9 FMP module access rights can only granted to the SCHOOL_HEAD group and the six built in FMP groups 10 Staff module access rights can only granted to the SCHOOL_HEAD group the STAFF group and the three built in STAFF_MANAGEMENT groups Copyright 2007 Education Bureau The Government of the HKSAR Page 9 All Rights Reserved WebSAMS User Manual Version 1 3 Copy User Group J Function Description A user can copy a user group through the User Group Maintenance function L Pre requisites The source user group to copy from should already exist
52. d User Account to Profile Internet Access Time Profile TEST Profile Description TEST123 User Type staff others Student Parent All School Level Session amp Class Level amp Class For class information for Student and Parent accounts School Year Current Year 2010 School Level All X School Session All X Class Level All X Class All X User ID For login use e 4 User Code Staff Code for Staff User Type Student Registration No for Student Parent User Type and Not Applicable for Others User Type User Name English or Chinese User Group Account Status all ER search P Reset O active Expired Select School Year Select School Level Select School Session Select Class Level Select Class a gt ooo Copyright 2007 Education Bureau The Government of the HKSAR Page 51 All Rights Reserved WebSAMS User Manual Version 1 3 For Adding user account of user type is All a User can select User Type All and click Add button b The User Type radio button All will be selected be default S SEC22 06 Security gt Access Control gt Internet Access Time Profile gt Add Account to Profile Add User Account to Profile Internet Access Time Profile TEST Profile Description TEST123 User Type Staff Others Student Parent all School Level Session For data access control for Staff and Others accounts School Level Al
53. d group members through the User Group Maintenance function L Pre requisites User group already exists User Procedures S SEC02 01 Security gt Access Control gt User Group Bottom C O oe T WebSAMS EE Administrator Built in m SCHOOL HEAD School Head Built in m ALLOCATION GROUP PRI Allocation Group Primary Built in m ALLOCATION GROUP SEC Allocation Group Secondary Built in m ANP_ADMIN Asvard and Punishment Team Built in m CDS_ADMIN CDS Administrator Built in m CLERK Clerk Built in m DM_ADMIN Data Management Administrator Built in m DM_USER Data Management User Built in m EMP_AOcT CLERK FMP Accounts Clerk Built in EMP_ADMIN FMP Administrator Built in Click Security gt Access Control gt User Group on the left menu 2 A list of groups is shown Click the Group ID link to modify the function access rights of the group 3 Select the Group Desc tab to modify the group description Select the Access Right tab and then click on the module link to modify the access rights 5 When modifying the access rights a pop up screen with the access rights of the selected module for the user group is shown Mark or un mark the check boxes to grant or revoke the access rights to or from the user group 6 Select the Add A C to Group tab to add remove members to from the user group 7 Click Save button to save any changes Copyright 20
54. ds are presented in a file in MS Excel CSV format Copyright 2007 Education Bureau The Government of the HKSAR Page 72 All Rights Reserved WebSAMS User Manual Version 1 3 LJ Notes 1 The audit trail of the Staff module can only be viewed by the users of the LO SCHOOL_HEAD user group 2 There are 3 types of staff audit trails e Staff Daily Transaction Log records updates to staff information e User Group Assignment Log records addition removal of user accounts to from the SCHOOL_HEAD group and the 4 built in Staff user groups e Access Rights Maintenance Log records updates to access rights of Staff functions Archive Audit Trail Function Description User can archive Staff Audit Trail records through the Staff Audit Trail function Pre requisites Staff Audit Trail records exist User Procedures e oe 1 Click Security gt Report amp Log gt Staff Audit Trail on the left menu Click Archive tab Select Audit Trail Type to archive Fill in the date range of the staff audit trails to be archived S SEC20 02 Security gt Report amp Log gt Staff Audit Trail gt Archive Audit Trail Type Daily Transaction Log C User Group Assignment Log C Access Rights Maintenance Log From 10 10 2002 DDMA YYY To 01042003 DDIM YYY 5 Click Save button Post effects Audit trail records that have been archived cannot be restored to WebSAMS system Copyrig
55. e immediately 4 Data Access Control on the student parent staff account is facilitated by the user code of the account e A student account can access only his her own data e A parent account can access only his her child s data e A staff account added to the STAFF group can access only his her own personal particulars tL Notes 1 Account Details Fields in red are mandatory e School Level Session for Staff and Others accounts a School Level Session is used to handle data access control in some modules for these two types of accounts For example if AM session is selected for a school with both AM and PM sessions the user account can only access the staff data of the AM session e User ID User Code a User Code is used for data access control on an account Student accounts are linked to valid students Parent accounts to valid students amp guardians and Staff account to valid staff b The User ID and User Code of a Student account is the Student Registration Number c The User ID of a Parent account is G_ Student Registration Number of his her child and the User Code is the Student Registration Number of his her child d The User Code of a Staff account is the Staff Code e Password a The password is case sensitive b For a newly created account the user has to change the password upon the first login c The password is encrypted before being stored in the database This protec
56. e Capture Team Score Capture Team can enter the scores of all subjects for all classes Subject Teacher can enter the scores of the subject that he she teaches Class Teacher can enter the scores of all subjects for his her class Access to Student Information can only be granted to members of the Student Data Access Control Team School Head group WebSAMS System Administrator group Clerk group and Class Teacher Class Teacher can access the personal information of students belonging to his her class Student Data Access Control Team School Head group WebSAMS System Administrator group and Clerk group can access the personal information of all students The function Special Team Maintenance allows adding removing user accounts to from the two special user groups Score Capture Team and Student Data Access Control Team and allows granting revoking of access rights of assessment score entry and student data maintenance to from the pre defined types of users or user groups Add User Accounts to Score Capture Team A Function Description User can add user accounts to the Score Capture Team through the Special Team Maintenance function LQ Pre requisites 1 The user account is not a member of this group 2 Only user accounts of Staff and Others type can be added to this group 8 User Procedures 1 Click Security gt Access Control gt Special Team on the left menu S SEC11
57. e ITED LAN Segment to access to WebSAMS please enter the IP addresses usually virtual IP of these workstations into the table below a a e WebSAMS Server 10 16 34 1 10 15 34 250 Click the link of IP Group for editing IP addresses 2 Check the box es on the left to select the IP Group s to be deleted 3 Click Delete button to delete the selected IP Group s Post effects The IP Address Group will be removed immediately and those ITED workstations with IP addresses falling into the IP Range of the group will not be able to access the system from ITED LAN Segment any more Notes This function is available only when the user logins WebSAMS from a workstation inside the SAMS LAN Segment Copyright 2007 Education Bureau The Government of the HKSAR Page 63 All Rights Reserved WebSAMS User Manual Version 1 3 2 2 3 System Customization A Function Description User can maintain the Central and Right Images in the Login Page School Logo and School Name in the top frame of every page and the Colour Scheme for newly created accounts through the System Customization function B Pre requisites N A User Procedures 1 Click Security gt Configuration gt System Custom on the left menu S SEC18 01 Security gt Configuration gt System Customization Image file uploaded should be of GIF JPEG format and with size not more than 100KB Login Page Image Central Image For bes
58. e detached Internet Access Time Profile will be deleted and will go back to screen S SEC22 01 Copyright 2007 Education Bureau The Government of the HKSAR Page 49 All Rights Reserved WebSAMS User Manual Version 1 3 Clicking Back button will go back to screen S SEC22 01 and Internet Access Time Profile will not be deleted Add Account to Profile Q Function Description This use case allows school users to assign user account s to Internet Access Time Profile s If the user account is assigned to more than one access time profile the actual internet access time of this user account shall be the union of the attached profiles B Pre requisites 1 The user must be logon first 2 Internet Access Time Profile ID must exist User Procedures 1 Click Security gt Access Control gt Internet Access Time Profile on the left menu 2 User can click Add Account to Profile tab in the screen S SEC22 05 Security gt Access Control gt Internet Access Time Profile gt Add Account to Profile Add Account to Profile Internet Access Time Profile TEST Profile Description TEST123 eee staff other student Parent All The following accounts have been added to the above profile CO __ Chinese User Name User Type No record 3 User account record s of the selected profile are listed in the page For Adding user account of user type is Staff Others a User can s
59. e right of the module name to expand the location access right table to show the function access rights outside the SAMS LAN Segment 3 Click on the module link to edit the corresponding function access rights outside the SAMS LAN Segment Copyright 2007 Education Bureau The Government of the HKSAR Page 38 All Rights Reserved WebSAMS User Manual Version 1 3 S SEC07 01 Security gt Access Control gt Location Access Control Maintenance of Function Access Control Outside SAMS LAN Segment e g ITED LAN or Internet gt Module Function gt School Management gt Student gt attendance gt Student Activities gt award amp Punishment gt Assessment gt Special Assessment gt Staff Deployment gt Staff gt cps gt HKAT gt HKEAA gt FMP gt SPA gt Report Management gt Data Management gt Timetabling gt Code Management gt Security gt E Mail gt Customization Click the link of a Module for maintaining Function Access Right Check the box es to grant function access rights outside the SAMS LAN Segment S SEC07 02 Security gt Access Control gt Location Access Control Maintain Function Access Rights Outside SAMS LAN Segment Module Function Attendance Bottom Vv Setup Attendance Parameters Vv Setup Special Attendance Taking Day Vv Vv Vv Vv Maintenance By Class Vv Vv f
60. elect User Type Staff Others and click Add button b The User Type radio button Staff Others will be selected be default Copyright 2007 Education Bureau The Government of the HKSAR Page 50 All Rights Reserved WebSAMS User Manual Version 1 3 S SEC22 06 Security gt Access Control gt Internet Access Time Profile gt Add Account to Profile Add User Account to Profile Internet Access Time Profile TEST Profile Description TEST123 User Type staff others Student Parent All School Level Session For data access control for Staff and Others accounts School Level All X School Session All X User ID For login use tests User Code Staff Code for Staff User Type Student Registration No for Student Parent User Type and Not Applicable for Others User Type User Name English or Chinese User Group X Account Status all active Expired ee T traren imername T Cmnovotsornome T uuercote T uertupe Tonn tes tsams STAFF CESET a Salt testslp tes tuser Others C Select School Level d Select School Session For Adding user account of user type is Student Parent a User can select User Type Student Parent and click Add button b The User Type radio button Student Parent will be selected be default S SEC22 06 Security gt Access Control gt Internet Access Time Profile gt Add Account to Profile Ad
61. emo Il Login Staff m tonytest TonyTest Staff 6 Check the box on the left of the list of user accounts to be added to the group 7 Click Save button at the bottom of the list Post effects User accounts will be added to the user group The access rights of that group will be passed to the member users The change will take effect at the next login Notes 1 Student and Parent user accounts cannot be attached to any other groups besides their own corresponding built in groups STUDENT and PARENT The two groups are attached automatically during creation of these two types of user accounts Therefore adding of these two types of accounts to user group is not available Copyright 2007 Education Bureau The Government of the HKSAR Page 15 All Rights Reserved WebSAMS User Manual Version 1 3 2 The built in user accounts sysadmin amp asysadmin cannot be added to any user groups Remove User Accounts from Existing User Group Q Function Description User can remove user accounts from the existing user group through the User Group Maintenance function B Pre requisites User accounts that have already been added to a user group can be removed from the user group User Procedures 1 Click Security gt Access Control gt User Group on the left menu 2 Select a User Group by clicking on the Group ID link 3 Click Add A C to Group tab S SEC02 07 Security gt Access Control
62. ent audit trail csv from 10 15 35 47 O EL Would you like to open the file or save it to your computer pensi Save Cancel More Info r HREAA IV Always ask before opening this type of file m SPA Open Folder m Report Management m Data Management m Timetabling TO Code Management m Security mr EMail m Customization Top Copyright 2007 Education Bureau The Government of the HKSAR Page 68 All Rights Reserved WebSAMS User Manual Version 1 3 7 Select the option to Open or Save the audit trail file Lt Post effects The audit trail records are presented in a file in MS Excel CSV format L Notes The audit trails of Staff and FMP modules cannot be viewed or downloaded in this function Archive Audit Trail 4 Function Description User can archive Audit Trail records through the Audit Trail function L Pre requisites Audit Trail records exist User Procedures Click Security gt Report amp Log gt Audit Trail on the left menu Click Archive tab 3 Fill in the date range of the audit trails to be archived S SEC08 02 Security gt Report amp Log gt Audit Trail gt Archive feu Archive iS a From 30 42 2002 DDMMAY YYY To 1305 2003 DMM YYY 4 Click Save button B Post effects 1 Audit trail records that have been archived cannot be restored to WebSAMS system 2 Audit trail records that have been archived will be deleted from the WebSAMS dat
63. equisites The school information has been properly set up with the correct class information Students and parents are present User Procedures Click Security gt Access Control gt User Account on the left menu Click Create Student Parent A C tab Select Account Type Student Parent to be created PP NS ces Select School Year School Level School Session Class Level and Class Code for creating the target accounts Select Account Password Option Select Login Language Option Select Report Option Copyright 2007 Education Bureau The Government of the HKSAR Page 35 All Rights Reserved WebSAMS User Manual Version 1 3 S SEC03 04 Security gt Access Control gt User Account gt Create Student Parent Account Create Student Parent Account Account Type Student Parent School Year 2007 SchoolLevel fall School Session fall sd Class Level falls Class Name fal Account Password Option User ID HKID No Tel No System Generation Login Language Option Login Language Chinese x Report Format PIF View Report Yes CO No 8 Click Generate A C button L Post effects User accounts are created and can be used to login the system The STUDENT and PARENT user group will be attached to the Student and Parent user accounts respectively B Notes 1 Once IYP is started next school year option will be provided in field School Year 2 Only the guardian of a student c
64. er Manual Version 1 3 B Size Control of Audit Trail amp Log Size Limit of Audit Trail stored in DB MB ji Zero for no limit default value 1MB Size Limit of Archived Audit Trail stored in io server MB Zero for no limit default value 1MB f Size Limit of DB backup recovery operation 10 log stored in server MB Zero for no limit default value 1MB Size Limit of Server backup recovery io operation log stored in server MB Zero for no limit default value 1MB Top Post effects The system will operate with the settings that have been entered The settings will be effective only when users login the system in the next time L Notes f Maximum number of fault login attempts allowed e The number of attempts that a user can try to login with a wrong password before the user account is locked After an account has been locked it can no longer login the system However after the elapse of the auto unlock period the user can login the system again e Zero value means that there is no limitation for unsuccessful login attempts while the default fault login attempt allowed is three Auto unlock period of locked accounts e Locked user account will be unlocked after the elapse of the auto unlock period counting from the time the account is locked e f no auto unlock is selected the locked account can only be unlocked manually in the Unlock Account function e Ze
65. et members of the target user group can be added to that user group D User Procedures 1 Click Security gt Access Control gt User Group on the left menu 2 Select a User Group by clicking on the Group ID link 3 Click Add Account to Group tab Copyright 2007 Education Bureau The Government of the HKSAR Page 14 All Rights Reserved WebSAMS User Manual Version 1 3 BA BA S SEC02 07 Security gt Access Control gt User Group gt Add Account to Group Add Account to Group Group ID IT_Staff Group Description IT Staff User Group Select User Type Staff Others The following accounts have been added to the above group No record Note 1 When Student and Parent accounts are created STUDENT group and PARENT group are respectively attached to them automatically 2 Any other user groups cannot be attached to Student and Parent accounts 4 Select User Type as either Staff or Others 5 Click Add button to view the list of users belonging to the selected user type and are not members of the group S SEC02 08 Security gt Access Control gt User Group gt Add Account to Group Add User Account to User Group Group ID IT_Staff Group Description IT Staff User Group a JO username Cninese User Name user Tve m cyrusadmin cyrusadmin Staff m maleyun MA LE YUN Staff m ruthstaff Ruth Staff Staff m stafflogin D
66. he subject that he she teaches e Class Teacher can enter the scores of all subjects for his her class only Add User Accounts to Student Data Access Control Team Function Description User can add user accounts to the Student Data Access Control Team through the Special Team Maintenance function Pre requisites 1 The user account is not a member of the group 2 Only user accounts of Staff and Others type can be added to this group User Procedures 1 Click Security gt Access Control gt Special Team on the left menu 2 Click Student Data Access Control Team tab Copyright 2007 Education Bureau The Government of the HKSAR Page 21 All Rights Reserved WebSAMS User Manual Version 1 3 S SEC11 04 Security gt Access Control gt Special Team gt Student Data Access Control Team oO UserID English User Name Chinese User Name _User Type HKEAAAL o HEEAA AL User Others Studenttest studenttest bikers sysadmin System Administrator Re S sysadmin F STAFF FIVE THREE ZERO eno Staff 3 Click Add button S SEC11 05 Security gt Access Control gt Special Team gt Student Data Access Control Team Add User Account to Student Data Access Control Team Page 1 7 of 2 M vBottom C E a E eee ey es para ey m jaaaaaa aaaaaa Others jabcdet abcdef Others M labcdefg abcdefg Others M abcdefgh
67. ht 2007 Education Bureau The Government of the HKSAR Page 73 All Rights Reserved WebSAMS User Manual Version 1 3 B 2 Audit trail records that have been archived will be deleted from the WebSAMS database permanently and cannot be enquired from the WebSAMS online system anymore 3 Archived audit trail files are in ZIP format After unzipping the original file is in MS Excel CSV format 4 Anew audit trail record recording the archive action will be created Notes 1 The audit trail of the Staff module can only be archived by the users of the SCHOOL_HEAD user group 2 The archive audit trail function can be used when the disk space allocated for audit trails is running out After the archive process the corresponding audit trail records will be deleted from the database 3 The From date is provided by the system and it is the earliest date staff audit trail records of the selected type exist User has to enter the To date Then the audit trails within the date range will be archived 4 A link will be provided for downloading the archived audit trail files if the user logins from the SAMS LAN Segment Outside SAMS LAN Segment i e ITED LAN or Internet the link will not be available Delete Archived Audit Trail Function Description User can download or delete archived Staff Audit Trail ZIP files through the Staff Audit Trail function Pre requisites An archived staff audit trail file is
68. hts Reserved WebSAMS User Manual Version 1 3 S SEC09 09 Security gt Report amp Log gt Report List of functions that can be accessed by User Group outside SAMS LAN R SECO009 E Built in Template Group ID Group Description S STEM_ADMIN WebSAMS System Administrator SCHOOL HEAD School Head m ALLOCATION_GROUPPRI Allocation Group Primary a m ALLOCATION_GROUP_SEC Allocation Group Secondary ANP_ADMIN Award and Punishment Tearn CDS_ADMIN CDS Administrator ace Segment Butin Boltin Built in a ee Built in ax m DMADMN_ Daa Management Administator Bitin m DMIR USER Data Management User Built in m FMP_ACCT_CLERK FMP Accounts Chek Bia m FMPADMN FMP Administator Built in m FMP_PEMYCASH_CIERK FMP Petty Cash Clerk Built in o FMP_USERI FMP USER 1 Built in m MPSR FMP USER 2 Boltin r PUSR PURS Butin C mam et m REPORT_ADMIN Report Management Administrator Bwin m SENIORTEACHER Senior Teacher Bult p STAFF St Builtin m STAFF MANAGEMENT Staff Management Blt m STAFF MANAGEMENT2 Staff Management2 Blt m STAFF MANAGEMENTS Staff Management3 Bult r pum Student o i m STUDENT HELPERS Stodent Hepes Bult m EAR O ee i a m TIMETABLING ADMIN Timetabling Adminis trator Botin TIMETABLING_USER Timetabling User Botin m DANIEL_CHAN ABB d
69. iewed by clicking the triangular icon next to the module name 2 The access rights of the source group will be copied to the new group However a user group created by copying from the built in FMP or STAFF user groups or the SCHOOL_HEAD group will not contain the modules of FMP and Staff for access right setting The reason is to confine the access to FMP and staff functions to the corresponding built in user groups for tighter control on the sensitive FMP and staff data Similarly access rights of functions restricted to the SCHOOL_HEAD group will not be copied 3 The user accounts attached to the source group will not be copied The user has to add user accounts to the newly created group Delete User Group L Function Description A user can delete a user group through the User Group Maintenance function B Pre requisites The user group to be deleted exists and is not a built in group User Procedures Click Security gt Access Control gt User Group on the left menu Select the User Group by checking the box beside the Group ID column Click Delete button User accounts belonging to the deleted group will be shown Pgo aa Copyright 2007 Education Bureau The Government of the HKSAR Page 11 All Rights Reserved WebSAMS User Manual Version 1 3 S SEC02 06 Security gt Access Control gt User Group Delete User Group The following UserAccount s is are found in the User Group IT_ST
70. ights gt School Management gt Student gt attendance gt Student Activities gt award amp Punishment gt Assessment gt SLP gt Special Assessment gt Staff Deployment gt student Activity Subsidies gt SFAA gt Report Management gt Data Management gt Data Query Tool gt Timetabling gt Code Management gt Security gt E Mail gt archive Select a module by clicking on its link to amend the specified module function access rights Module function access right maintenance window will be popped up S SEC02 04 Security gt Access Control gt User Group gt Access Right Maintain Function Access Rights Group ID Group Description Chinese Group Description Module Function SS meae aoa f oeiee m execute IT_Staff IT Staff User Group HKAT Bottom o Setup r r O Score Input Form O Score Maintenance r O Score Entry Status o Allocation 51 o Score Extraction oojaa Oo Record Transfer Export O Record Transfer Import m Record Transfer Reset ojojoj a r Report O Data Communication Top Copyright 2007 Education Bureau The Government of the HKSAR All Rights Reserved Page 13 WebSAMS User Manual Version 1 3 6 Maintain the specified module function access rights by checking on or off the boxes 7 Click Save button to update the
71. ile for Student user type Built in H TET TEST123 User created Top Format PDF X 2 Check the check box es on the left of the profile s to be listed in the report 3 Select the format of the report to be one of PDF Word RTF Excel 4 Click Preview amp Print button to produce the report LO Post effects The report will be displayed in a pop up window which allows user to preview or print it out LJ Notes 1 The Profile ID and Profile Description are shown 2 For School Year the User ID User Name User Code User Type and Class are shown 3 Report supports selection of multiple profiles Copyright 2007 Education Bureau The Government of the HKSAR Page 93 All Rights Reserved WebSAMS User Manual Version 1 3 2 3 5 Purge Log J Function Description User can delete the successful and unsuccessful login logs permanently from the system through the Purge Log function LL Pre requisites The log records to be deleted are not required to be retrieved anymore D User Procedures 1 Click Security gt Report amp Log gt Purge Log on the left menu Select the type of login log to be deleted Fill in the date range of the log records to be deleted S SEC12 01 Security gt Report amp Log gt Purge Log Login Log Type Successful Login log 1 From 28092002 DDMMIYY YY To 2610672003 DD MMI YYY 4 Click Delete button LI Post effects All purged logs are rem
72. ion Bureau The Government of the HKSAR All Rights Reserved Prohibited WebSAMS User Manual Version 1 3 1 1 1 Module Overview Introduction Objective Security module consists of three major components Access Control System Configuration and Audit Trail amp Log Access control comprises User Account User Group Function Access Control and Location Access Control For function access control a user account must be created before a user can access the system A user account can be assigned to one or more user groups and access rights are granted to the user groups The user accounts inherit the function access rights of the groups to which the user accounts belong Moreover a user account can be of different user types that restrict what user groups can be granted to that user account To simplify the set up of access rights there are more than twenty built in user groups that have default function access rights The school can also create new user defined groups and change the built in user groups function access rights Normally the school users should be accessing WebSAMS from the SAMS LAN Segment which is treated as a trusted network by the system For Location Access Control the school can determine whether to allow access to WebSAMS from ITED LAN Segment or via Internet i e untrusted network and what functions can be accessed when a user logins outside SAMS LAN segment i e ITED LAN Segment amp Internet
73. isting A C and subsequent newly created A C with user type Staff or Others Parent and Student are assigned to build in profiles STAFF OTHERS PARENT and STUDENT respectively There is no limitation of internet access for all user accounts initially while school users can add delete user account s in 3 built in profiles according to their operational needs afterwards Add Internet Access Time Profile L Function Description This use case allows school users to add internet access time profile s L Pre requisites 1 The user must be logon first 2 Users belong to a user group with Internet Access Time Profile Execute right can process this function da User Procedures 1 Click Security gt Access Control gt Internet Access Time Profile on the left menu 2 A list of Internet Access Time Profiles is shown click the Add button at the bottom of the page to add a new Internet Access Time Profile Copyright 2007 Education Bureau The Government of the HKSAR Page 43 All Rights Reserved WebSAMS User Manual Version 1 3 S SEC22 01 Security gt Access Control gt Internet Access Time Profile m Internet Access Time Profile Profile Description PARENT Built in profile for Parent user type STAFF_OR OTHERS Built in profile for Staff or Other user type Built in profile for Student user type TeST123 S
74. itted to a class already with student parent accounts only the student parent account of this student will be created Create Individual Account can also be used to create user account for this student and his her parent The student parent account will automatically expire when the student departs or graduates When All option is selected in field School Year if student has schooling record in both current or next school year only current year record will be displayed A report in PDF or Excel format containing the account information will be generated and stored in the Report Repository This report will list the School Year School Level School Session Class Name User ID Class No English Name Chinese Name and the Password Option of the user accounts generated Copyright 2007 Education Bureau The Government of the HKSAR Page 37 All Rights Reserved WebSAMS User Manual Version 1 3 2 1 4 Location Access Control Maintenance J Function Description This function allows the school to set the accessibility of functions outside the SAMS LAN Segment i e from ITED LAN Segment or Internet The following diagram illustrates this concept Sts ul Puc nerwor Function A May Not Be i Bu serA Accessible e g Home B Pre requisites N A User Procedures 1 Click Security gt Access Control gt Loc Access Ctrl on the left menu 2 Click on the triangular icon to th
75. k box es to select user account s to be added as group members 4 Click Save button L Post effects User accounts will be added to the special group of Score Capture Team LJ Notes Members of the Score Capture Team are able to enter scores for all subjects of all classes of the current school year or even past school years if the option of by Score Capture Team has been checked in the Capture Score Option page Delete User Accounts from Score Capture Team J Function Description User can remove user accounts from the Score Capture Team through the Special Team Maintenance function 1 Pre requisites The user account is a member of this group Copyright 2007 Education Bureau The Government of the HKSAR Page 19 All Rights Reserved WebSAMS User Manual Version 1 3 User Procedures 1 Click Security gt Access Control gt Special Team on the left menu S SEC11 01 Security gt Access Control gt Special Team gt Score Capture Team Score Capture Team Bottom Om English User Name User Type Sec_wd_sen_tcherl Chan tai man RAZ Staff sec_wd_sen_tcher2 Chan tai man BRASS Staff Sec_wd_sen_tcher3 Chan tai man RAZ Staff m spa_teacher SPA Teacher Esti Staff staff710 STAFF SEVEN ONE ZERO Hte Staff ETE STAFF TWO SPRZ Staff staff test STAFF NINE SxBnAL Staff 2 A list of user accounts is shown Check the check box es to select user account s to be deleted 3 Click Dele
76. l X School Session All X School Level Session amp Class Level amp Class For class information for Student and Parent accounts School Year Current Year 2010 v School Level All X School Session All v Class Level All v Class All User ID For login use User Code Staff Code for Staff User Type Student Registration No for Student Parent User Type and Not Applicable for Others User Type User Name English or Chinese User Group X Account Status all EA Search MY Reset Active Expired Select School Year Select School Level Select School Session Select Class Level Select Class a 9 20 Fill in User ID Fill in User Code Fill in User Name English or Chinese Select User Group Select Account Status oP N amp oF A Click Search button to search user account s that are not exist in the profile 10 Click Reset button to reset all inputted data 11 Select the user account s by checking the checkbox s besides the User ID 12 Click Save button to save the record s to profile 13 Click Close button to close the popup window LO Post effects Copyright 2007 Education Bureau The Government of the HKSAR Page 52 All Rights Reserved WebSAMS User Manual Version 1 3 1 If user clicks Save button Are you sure to save the record s will be alerted 2 Click OK button to save the record s The popup window will be cl
77. lick Security gt Access Control gt Internet Access Time Profile on the left menu 2 Click the built in Internet Access Time Profile ID to view the profile details S SEC22 04 Security gt Access Control gt Internet Access Time Profile gt Profile Details Internet Access Time Profile Internet Access Time Profile Internet Access Time Profile STUDENT Profile Description Built in profile for Student user type Chinese Profile Description BEAT TA it BS Fe AROS RRL All 24 Hours 3 Click Back button to go back to S SEC04 01 Li Post effects NIL L Notes NIL Delete Internet Access Time Profile Function Description This use case allows school users to delete internet access time profile s Copyright 2007 Education Bureau The Government of the HKSAR Page 48 All Rights Reserved WebSAMS User Manual Version 1 3 L Pre requisites 1 The user must be logon first 2 Users belong to a user group with Internet Access Time Profile Execute right can process this function User Procedures 1 In screen S SEC22 01 select a profile s to delete by selecting a checkbox s at the left hand side of the profile name 2 Click Delete button to delete profile s 3 A dialog box Are you sure to delete record s 4 Click OK button to confirm the deletion Li Post effects NIL LO Notes If there are some User Accounts in the profile 1 It will go to screen
78. ll_teacher2 XO3MO1qnZdYdgyfeulLPmQ STFOO2 Chan tai man RAI pri_all_teacher3 XO3MO1qnZd dgyfeulLPmQ STFOO2 Chan tai man RAI aaaflnri all rade ad XNaMAtan7AYdendeull Pmoa STFON Chan tai man Eiir Line 1 Column 38 2002 10 28 00 00 4 2002 12 20 00 0 2002 10 28 00 00 2002 12 20 00 00 2002 12 20 00 00 2002 12 20 00 00 2002 12 20 00 00 2002 12 20 00 00 2002 12 20 00 00 2002 12 20 00 00 2002 12 20 00 00 2002 12 20 00 00 2002 12 20 00 00 207 197 901 naa gt PPOLO OLOLO O OLOl Oyo Moo e Password Expiry a Password Expiry Date Password will expire on the date stated in the field Password Expiry Date The Password Expiry Date is entered automatically by the system based on the Password Expiry Period set in the System Configuration function If the password has expired the system will not allow the user to login There will be warnings to the user starting from 14 days before the expiry of the password b Never Expire Password will never expire If the Password Expiry Period set in the System Configuration function is 0 the radio button of Never Expire will be selected automatically e Login Language a The default login language Chinese English used each time the user logins e User Account Access Times a Upon login the system will first check the System Access Time in System Configuration and then the User Account Ac
79. me Profile 1 20 characters 2 Internet Access Time Profile can contain only the characters of a z A Z 0 9 or _ 5 Modify the information then click Save button to save the record 6 Click Reset button to reset all the inputted data 7 Click Back button to go back to S SEC04 01 Post effects 1 Ifuser click Save button a message Record s saved successfully will be displayed at the top of the screen S SEC04 03 2 A new Internet Access Time Profile will be created Notes NIL Edit Internet Access Time Profile Function Description This use case allows school users to edit internet access time profile s Pre requisites 1 The user must be logon first Copyright 2007 Education Bureau The Government of the HKSAR Page 46 All Rights Reserved WebSAMS User Manual Version 1 3 2 Users belong to a user group with Internet Access Time Profile Execute right can process this function User Procedures 1 Click Security gt Access Control gt Internet Access Time Profile on the left menu 2 Click the Internet Access Time Profile ID screen S SEC22 04 will be shown 3 All the information including Internet Access Time Profile ID Profile Description Chinese Profile Description and access time information of the selected Internet Access Time Profile will be filled in the field s S SEC22 04 Security gt Access Control gt Internet Access Time Profile gt P
80. nce L Pre requisites This function is available only when the user logins WebSAMS from a workstation inside the SAMS LAN Segment Copyright 2007 Education Bureau The Government of the HKSAR Page 61 All Rights Reserved WebSAMS User Manual Version 1 3 User Procedures 1 Click Security gt Configuration gt IP Config on the left menu S SEC06 01 Security gt Configuration gt IP Configuration Record s added successfully To allow certain workstations in the ITED LAN Segment to access to WebSAMS please enter the IP addresses usually virtual IP of these workstations into the table below 1 ee Websams Server 10 15 34 1 10 15 34 250 Click the link of IP Group for editing IP addresses 2 Click Add button to add a new IP Group S SEC06 02 Security gt Configuration gt IP Address Configuration Create IP Address Group IP Address Group Name l IP Address Range Fom Tol Excluding the following IP address Range From Lee To Eoo _ Example of IP address 192 12 253 1 10 16 45 200 3 Enter IP Address Range 4 Enter Excluding IP Address Range if necessary 5 Click Save button Li Post effects The IP Address Group will be effective immediately once created A user can then login WebSAMS from an ITED workstation with an IP address included in the IP Address Range of an IP Group B Notes 1 The subnet of the IP group entered into the
81. nction Description User can produce reports through the Report function Before producing a report the report template has to be selected This section describes how to select report templates for printing while the detailed instructions of producing individual reports are described in the individual report sections L Pre requisites Adobe Acrobat Reader and Microsoft Office 2000 should be installed in the workstation to view the reports 8 User Procedures Click Security gt Report amp Log gt Report on the left menu 2 Select the report category and the report language All reports of the selected language under the selected category will be listed 3 Click on the Report Name ID link and a list of built in and user defined report templates is displayed S SEC09 01 Security gt Report amp Log gt Report Category all Categories pa Language English Chinese 3 Report Name ID Link Report Name ID YList of functions that can be accessed by User Account outside SAMS LAN Segment R SECO08 E Built in Template Built In 284022003 20 10 V Test HsexDefin 4 Report comes Link List of functions that can be accessed b SULLA nm List of functions that can be accessed outside SAMS LAN Segment R SEC007 E Successful Login Log R SECO04 E gt Unsuccessful Login Log R SEC005 E Duser Account List by User Group R SEC001 E gt User Account Profile Report R SECO02 E User Group Access Right
82. nge password date plus the password expiry period Zero value means the password of user accounts would never expire The default value is 100 days 6 Number of passwords stored in password history The system will store a certain number of passwords previously used The number of passwords stored can be defined from 1 to 5 When user changes the password the system will ensure that the new password entered does not duplicate with the stored passwords The default value is one 7 Enable Multiple Login With this flag turned on users can login the system by using the same account in the same or different workstations from several browsers at the same time It is recommended to disable Multiple Login for security reason By default multiple login is not allowed 8 Enable Internet Access Login from the Internet can be enabled disabled By default access from Internet is disabled 9 Enable ITED Access Login from the school ITED LAN Segment can be enabled disabled However any workstations in the ITED LAN segment still cannot login the system unless its IP Address has been entered in the IP configuration table By default access from ITED LAN Segment is disabled 10 Data Backup log file path The database backup and recovery log can be viewed in WebSAMS This is the specific file path directory where the database backup recovery operation log files are stored There is no default file path 11 Server
83. nment of the HKSAR Page 87 All Rights Reserved WebSAMS User Manual Version 1 3 School Management Security SPA Special Assessment Saif Staff Deployment Student Student Activities Timetabling OOyVO VO O O O O O aTor Format PDF Preview amp Print lt JBack Check the check box es on the left of the module s to list in the report Select the format of the report to be one of PDF Word RTF Excel Click Preview amp Print button to generate the report Li Post effects The report will be displayed in a pop up window which allows user to preview or print it out L Notes The report shows the accessibility of functions outside SAMS LAN segment grouped by module The master settings of access from the Internet and from ITED LAN Segment are listed at the beginning of the report Besides having the accessibility of functions these master settings must be turned on before the functions can actually be accessed from Internet or from ITED LAN Segment The View Edit Add Delete amp Execute rights of the functions under the selected modules are shown Access right setting of Y means having access right N means no access rights and means the right not applicable Report supports selection of multiple modules List_of functions that can be accessed by User Account outside SAMS LAN Segment Report R SEC008 L Function Description Unde
84. nt i e from a trusted network In order to allow a workstation in the ITED LAN Segment to login WebSAMS the following two conditions should be met e Access from the ITED LAN has been enabled and e The IP address of this workstation has been entered into the IP Configuration table The IP Configuration function allows the definition of the IP address groups to contain the IP addresses of those workstations inside the ITED LAN Segment that are allowed to access the system For a login from a workstation with an IP address having different subnet as compared to the IP address of the WebSAMS Server and also having different subnet as compared to the subnet information of the ITED LAN defined in the system property file the login will be treated as from the Internet Access from Internet can be enabled disabled in the System Configuration function Special attention should be paid to whether the school s ITED LAN Segment uses a Dynamic Host Configuration Protocol DHCP server as the IP address may not be dedicated to a specific workstation In this case IP addresses have to be entered manually into those workstations that are allowed to access WebSAMS These IP addresses entered should fall within the IP Exclusion Range of the DHCP server Add IP Group B Function Description User can create an IP Group that controls which workstations in the ITED LAN Segment to be able to access WebSAMS through the IP Configuration Maintena
85. nt User Built in TO FMP_ACCT_CLERK FMP Accounts Clerk Built in TO FMP_ADMIN FMP Administrator Built in M FMP_PETTYCASH_CLERK FMP Petty Cash Clerk Built in lO FMP_USER1 FMP USER 1 Built in rT FMP_USER2 FMP USER 2 Built in TO FMP_USER3 FMP USER 3 Built in TT HKEA HKEA Built in TT NAA_ADMIN NAA Administrator Builtin lm PARENT Parent Built in M REPORT_ADMIN Report Management Administrator Built in M SENIOR_TEACHER Senior Teacher Built in 9 Click Select button to attach the group s and the system will go back to Create Individual Account page 10 To detach any attached user group s check the box next to the group name to select the group s to be detached Copyright 2007 Education Bureau The Government of the HKSAR All Rights Reserved Page 32 WebSAMS User Manual Version 1 3 11 Click Detach Group button to detach the group s 12 Click Save button to create the user account Post effects 1 A newly created user account will be able to login WebSAMS but will have no rights to use the functions until he she is attached to at least one User Group with function access rights 2 When a student departs the school the corresponding student and parent accounts will expire immediately However when a student is graduated the account will expire after the last day of the school year i e expire on 01 September 3 When the employment of a staff is terminated the staff account will expir
86. o to the corresponding directory in the WebSAMS server to remove the obsolete log files Copyright 2007 Education Bureau The Government of the HKSAR Page 96 All Rights Reserved
87. of data will be logged D User Procedures Click Security gt Report amp Log gt Audit Trail on the left menu Click View tab Fill in the date range of the audit trails to be viewed or downloaded P Oe Check the box es to select the module s for which the audit trail is to be viewed or downloaded 5 Click View button at the bottom of the page Copyright 2007 Education Bureau The Government of the HKSAR Page 67 All Rights Reserved WebSAMS User Manual Version 1 3 uy Module Name School Management Student Attendance Student Activities e http 10 15 35 47 isp seemmses lal pes pea The Audit Trail is in csv format and Assessment can be opened by MS Excel Please click the View button to Special Assessment openisave the audit trail Staff Deployment CDS HKAT HKEAA SPA Report Management Data Management Timetabling Code Management Security E Mail Customization 4 mammam ojo ojo SARE E Al ol To 6 Click View button in the pop up window to trigger the Windows download pop up window v uuU Botte OOOO m School Management m Student m Arenda Po m sais ania File Download x m Award amp Punishment m ee You are downloading the file Fai Special Assessm
88. on of the selected user s are shown 4 Access right setting of Y means having access right N means no access right and means the right not applicable 5 A user account can access a function only if the account is in a group which has access right to this function and the accessibility of this function outside SAMS LAN Segment has been turned on in the Location Access Control function Report supports selection of multiple user accounts Only Staff amp Others accounts can be selected and listed in this report For Student or Parent accounts refer to the List of functions that can be accessed by User Group outside SAMS LAN Segment report R SECO09 and select STUDENT or PARENT group List_of functions that can be accessed by User Group outside SAMS LAN Segment Report R SEC009 Function Description Under the Access Control Information report category this report lists out the accessibility of functions by user group outside the SAMS LAN segment i e ITED LAN Segment or Internet Pre requisites Adobe Acrobat Reader and Microsoft Office should be installed in the workstation in order to view the report User Procedures 1 Select List of functions that can be accessed by User Group outside SAMS LAN Segment Report from the report selection page Click on the template link to go to the report parameter screen Copyright 2007 Education Bureau The Government of the HKSAR Page 90 All Rig
89. ort will be displayed in a pop up window which allows user to preview or print it out Copyright 2007 Education Bureau The Government of the HKSAR Page 86 All Rights Reserved WebSAMS User Manual Version 1 3 L Notes All login attempt records are stored in the system The attempted Login Date amp Time User ID User Name User Type and the failure reason of the unsuccessful login attempts are shown List_of functions that_can be accessed outside SAMS LAN Segment Report R SEC007 J Function Description Under the Access Control Information report category this report lists out the accessibility of functions outside the SAMS LAN segment i e ITED LAN Segment or Internet B Pre requisites Adobe Acrobat Reader and Microsoft Office should be installed in the workstation in order to view the report User Procedures 1 Select List of functions that can be accessed outside SAMS LAN Segment Report from the report selection page Click on the template link to go to the report parameter screen S SEC09 10 Security gt Report amp Log gt Report List of functions that can be accessed outside SAMS LAN Segment R SEC007 E Built in Template B otto ri Module Name Assessment Attendance Anvard amp Punishment CDS Code Management Customization Data Management E Mail FMP OOOO O O O O O Copyright 2007 Education Bureau The Gover
90. osed 3 Record s added successfully will be shown on the top of the screen S SEC22 05 4 Selected record s will be listed in screen S SEC22 05 L Notes NIL Delete Account from Internet Access Time Profile 4 Function Description This use case allows school users to delete user account s from internet access time profile s 4 Pre requisites 1 The user must be logon first 2 There is user account s attached in the Internet Access Time Profile User Procedures 1 Click Security gt Access Control gt Internet Access Time Profile on the left menu Select record s by checking the checkbox beside the User ID Click Delete button to remove the records from profile L Post effects 1 If user clicks Delete button Are you sure to delete the record s will be alerted 2 Click OK button to delete the record s 3 Record s deleted successfully will be shown on the top of the screen S SEC22 05 B Notes NIL Copyright 2007 Education Bureau The Government of the HKSAR Page 53 All Rights Reserved WebSAMS User Manual Version 1 3 2 2 Configuration 2 2 1 System Configuration Maintenance B Function Description User can maintain the General Settings System Access Time inside SAMS LAN Segment System Access Time outside SAMS LAN Segment i e ITED LAN or Internet Release of Access Time Control to 24 hours E mail Function Settings and Size
91. oved from the system permanently There is no way to recover purged log records B Notes 1 WebSAMS logs every login attempt in its database regardless whether the attempt is successful or not For failed login attempts the failure reasons will be recorded 2 To free up space in the database the system administrator may purge the log records when necessary 3 By default the From date is provided by the system and it is the earliest date successful unsuccessful login log records exist The To date is also provided and its default value is one day before the system date User can modify both dates and then the successful unsuccessful login log records within the date range will be purged Copyright 2007 Education Bureau The Government of the HKSAR Page 94 All Rights Reserved WebSAMS User Manual Version 1 3 2 3 6 View Backup Log Function Description User can view the database and server backup recovery operation log files through the View Backup Log function Pre requisites The Data Backup log file and Server Backup log file paths stated in the System Configuration function should be entered correctly so that these log files can be retrieved User Procedures Click Security gt Report amp Log gt View Backup Log on the left menu Select Log File type Fill in the date range of the backup log files to be listed Click View button Bo i oN a S SEC15 01 Securit
92. present User Procedures S SEC21 03 Security gt Report amp Log gt Staff Audit Trail gt Delete Archived Audit Trail iew archive MESA Archived Puditirail E Archive File Name Creation Date Date From Date To M STE Daily Transaction 9992 J4MARI003 12APRO003 an 12042003 140372003 12042003 Click Security gt Report amp Log gt Staff Audit Trail on the left menu Click Delete Archived Audit Trail tab Select the archived file to be downloaded deleted oO SS Click the file name link to download Copyright 2007 Education Bureau The Government of the HKSAR Page 74 All Rights Reserved WebSAMS User Manual Version 1 3 5 Check the check box on the left of the file name and click Delete button to delete the file Li Post effects 1 The archived audit trail file stored as a physical file in ZIP format in the directory will be physically removed from the WebSAMS server 2 A new audit trail record recording the deletion action of the Archived Audit Trail file will be created L Notes 1 The audit trail of the Staff module can only be downloaded or deleted by users of the SCHOOL_HEAD user group 2 Archived audit trail files are in ZIP format After unzipping the original archived audit trail file is in MS Excel CSV format 3 A link will be provided for downloading the archived audit trail files if the user logins from the SAMS LAN Segment Outside SAMS LAN Segment i e ITED
93. r the Access Control Information report category this report lists out the accessibility of functions by user account outside the SAMS LAN segment i e ITED LAN Segment or Internet Copyright 2007 Education Bureau The Government of the HKSAR Page 88 All Rights Reserved WebSAMS User Manual Version 1 3 L Pre requisites Adobe Acrobat Reader and Microsoft Office should be installed in the workstation in order to view the report User Procedures 1 Select List of functions that can be accessed by User Account outside SAMS LAN Segment Report from the report selection page Click on the template link to go to the report parameter screen Specify the search criteria of the user accounts to list Click Search button to list out the user accounts S SEC09 08 Security gt Report amp Log gt Report List of functions that can be accessed by User Account outside SAMS LAN Segment R SEC008 E Built in Template Please input the print criteria School Level Session For data access control for Staff and Others accounts School Level Secondary School Session Whole Day User ID sec_wd_sen_tcher User Code User Name English or Chinese User Group X Account Status All OAdctive Expired Format PDIF X Note 1 This report is NOT applicable to Student and Parent accounts 2 Only STUDENT group can be attached to Student accounts and PARENT group to Parent accounts 3 To Preview amp P
94. removed School Name School Name Eng For best display effect upload image of 360 x 40 pixels C Text English Name L Browse Upload Select your preferred colour scheme Blue C Green Yellow Purple 6 You can customize the school s English and Chinese names by using either text format or image format school names i To use text format school name click the Text option and enter the name in the adjacent input box ii To use image format school name click Image option and then click Browse button to select an image file for uploading Click Upload button to upload the image At any time the system only keeps one English and one Chinese school name image in the WebSAMS server and the newly uploaded image will overwrite the existing one iii Click Save button to save the school name changes Copyright 2007 Education Bureau The Government of the HKSAR Page 65 All Rights Reserved WebSAMS User Manual Version 1 3 7 You can also delete the existing school name image by clicking Delete button 8 To set the colour scheme click the preferred colour The colour will be adopted by the newly created user accounts Click Save button to save the colour scheme changes LQ Post effects The changes will take effect when the users login the next time L Notes 1 When an image file has been successfully uploaded it will not be displayed automatically User has to select
95. report selection page Click on the template link to go to the report parameter screen S SEC09 02 Security gt Report amp Log gt Report User Account List by User Group R SEC001 E Built in Template 7 Bottom m O owo m SYSTEM_ADMIN WebSAMS System Administrator Built in rT SCHOOL_HEAD School Head Built in m ALLOCATION_GROUP_PRI Allocation Group Primary Built in m ALLOCATION_GROUP_SEC Allocation Group Secondary Built in rp ANP_ADMIN Anard and Punishment Tearn Built in m CDS_ADMIN CDS Administrator Built in Copyright 2007 Education Bureau The Government of the HKSAR Page 81 All Rights Reserved WebSAMS User Manual Version 1 3 m SEC_Test Security Access Right Test User created io VEWGROUP VIEW GROUP User created Top Format PDF v B B Preview amp Print J Back 2 Check the check box es on the left of the user group s to be listed in the report Select the format of the report to be one of PDF Word RTF Excel Click Preview amp Print button to produce the report Post effects The report will be displayed in a pop up window which allows user to preview or print it out Notes 1 The Group ID and Group Description are shown 2 For group members the User ID User Name User Type and User Code are shown 3 Report supports selection of multiple user groups User Account Profile Report R SEC002 Function Des
96. rint the report for the List of Functions that can be accessed by Student or Parent accounts outside SAMS LAN Segment please click on the following link and select either STUDENT or PARENT group List of Functions that can be accessed by User Group outside SAMS LAN Segment R SEC009 E m userim J Enaren username Cinese username g bes wd_sen_ Ey T tai man a STFO02 Bar sec_wd_sen_tcher2 Chan tai man RAR STFO02 Staff sec_wd_sen_tcher3 Chan tai man BRA rooz State 4 Check the check box es on the left of the user s to list in the report 5 Select the format of the report to be one of PDF Word RTF Excel 6 Click Preview amp Print button to generate the report L Post effects The report will be displayed in a pop up window which allows user to preview or print it out Copyright 2007 Education Bureau The Government of the HKSAR Page 89 All Rights Reserved WebSAMS User Manual Version 1 3 L Notes B 1 The report shows the accessibility of functions by user account outside SAMS LAN segment 2 The master settings of access from the Internet and from ITED LAN Segment are listed at the beginning of the report Besides having the accessibility of functions these master settings must be turned on before the user can actually access the functions from Internet or from ITED LAN Segment 3 The View Edit Add Delete amp Execute rights to every functi
97. ro value means that there is no auto unlock for locked account and the default is fifteen hours Automatic logout period inside SAMS LAN segment e The system will automatically logout an account after it has been left idle for a period longer than this setting when the account logins within the SAMS LAN segment e The default value is 15 minutes Automatic logout period outside SAM LAN segment e The system will automatically logout an account after it has been left idle for a period longer than this setting when the account logins outside the SAMS LAN segment e The default value is 5 minutes Password expiry period Copyright 2007 Education Bureau The Government of the HKSAR Page 56 All Rights Reserved WebSAMS User Manual Version 1 3 For security reason a normal user account should change its password periodically System will force the user to change the password after the elapse of the period defined User accounts can also be set to have password never expired By default the password of the sysadmin account never expires For user accounts with password expiry the password expiry date is shown on the screen displaying the user information The user will be reminded to change his her account password if it is going to expire within 14 days The remaining number of days will be displayed after each successful login After the password has been changed the new password expiry date will be the cha
98. rofile Details Internet Access Time Profile Edit Internet Access Time Profile Internet Access Time Profile TEST Profile Description TEST123 Chinese Profile Description TEST123 AEE a ee From 12 07 2011 24 Hours ODIMMIYYYY Ga 7 T o 30 07 2011 Eis a DD MMYYYY E Monday Friday From 24 Hours DD MM YYYY To To DD MM YYYY Saturday From Ey 24 Hours E DD MM YYYY se A e To To uY DD MMIYYYY Sunday From 24 Hours DD MMIYYYY To OU QU To 00 DD MMIYYYY MY Re Reset fl Save Back 4 Update the data 5 Click Save button 6 Click Reset button to reset all the inputted data 7 Click Back button to go back to S SEC04 01 LI Post effects 1 Ifuser click Save button a message Record s updated successfully will be displayed at the top of the screen S SEC04 04 2 The information of the Internet Access Time Profile is updated Copyright 2007 Education Bureau The Government of the HKSAR Page 47 All Rights Reserved WebSAMS User Manual Version 1 3 CI Notes NIL View Internet Access Time Profile A Function Description This use case allows school users to view internet access time profile s L Pre requisites 1 The user must be logon first 2 Users belong to a user group with Internet Access Time Profile Execute right can process this function User Procedures 1 C
99. rovided by the system and it is the earliest date FMP audit trail records of the selected type exist User has to enter the To date Then the audit trails within the date range will be archived 4 A link will be provided for downloading the archived audit trail files if the user logins from the SAMS LAN Segment Outside SAMS LAN Segment i e ITED LAN or Internet the link will not be available 5 For Primary AM and Primary PM schools each having its own WebSAMS server the two schools actually share the same FMP data set and the FMP information is stored in the Primary AM WebSAMS server The archive action must be done in the Primary AM WebSAMS and cannot be done in the Primary PM WebSAMS because it does not contain the FMP data Delete Archived Audit Trail 4 Function Description User can download or delete archived FMP Audit Trail ZIP files through the FMP Audit Trail function B Pre requisites An archived FMP audit trail file is present B User Procedures Copyright 2007 Education Bureau The Government of the HKSAR Page 78 All Rights Reserved WebSAMS User Manual Version 1 3 S SEC20 04 Security gt Report amp Log gt FMP Audit Trail gt Delete Archived Audit Trail Delete Archived Audit Tira Date To Creation Date Date From 1 2 3 4 5 Click Security gt Report amp Log gt FMP Audit Trail on the left menu Click Delete Archived Audit Trail tab
100. s 5 Inthe access right table X represents that right has been granted while represents that the setting of right is not available If a cell is blank right has not been granted Copyright 2007 Education Bureau The Government of the HKSAR Page 40 All Rights Reserved WebSAMS User Manual Version 1 3 2 1 5 Unlock Account Function Description User can unlock a locked account through the Unlock Account function Pre requisites A user account is locked when a user uses wrong passwords to login WebSAMS repeatedly and the number of times of fault login exceeds the maximum number of fault login attemps defined in the System Configuration function User Procedures 1 Click Security gt Access Control gt Acct Unlocking on the left menu 2 Check the box to select the account s to be unlocked S SEC10 01 Security gt Access Conrol gt Account Unlocking mi UserID English User Name Chinese User Name Locked Time m pr_all_clerkt Chan tai man BAAR 01 01 2001 09 00 00 Refresh Unlock 3 Click Unlock button Post effects The user account will be unlocked and then the user can login immediately Notes 1 When a user uses a wrong password to login WebSAMS repeatedly and if the number of times of fault login is greater than the maximum number of fault login attempts allowed the user account will be locked by the system 2 A user whose account is locked can contact
101. s R SEC003 E Click amp or the link to display the report template s and then click the template you need to create the report 4 Click on the Report Template link to go to the corresponding report parameter screen 5 Follow the steps in the individual report s section to enter the print criteria to produce the reports Li Post effects Copyright 2007 Education Bureau The Government of the HKSAR Page 80 All Rights Reserved WebSAMS User Manual Version 1 3 The report parameter screen of the selected report will be shown for the user to enter the print criteria Notes 1 Reports under the Security module are grouped into 3 report categories e Access Control Information e Login Log e User Group Account Information 2 A built in template is provided for each Report Name ID It can be downloaded from the Template function of the Report Management module After editing by using the Crystal Reports software the edited report template can be uploaded to the WebSAMS server as a user defined template User Account List by User Group Report R SEC001 Function Description Under the User Group Account Information report category this report lists out the members of any user groups Pre requisites Adobe Acrobat Reader and Microsoft Office should be installed in the workstation in order to view the report User Procedures 1 Select User Account List by User Group Report from the
102. sadmin 03 01 2003 28 SYSTEM_ADMIN 10 03 59 m sysadmin sysadmin sysadmin 03 01 2003 26 SYSTEM_ADMIN 10 05 39 m sysadmin sysadmin sysadmin 03 01 2003 26 SYSTEM_ADMIN 10 06 26 4 Click Logout button to force the selected user account s to logout LO Post effects When a user account is forced to logout the user s session will be killed immediately and the connection will be terminated at once LJ Notes The current activities of individual user accounts are not shown 2 The current process being carried out by the user will not be completed after being logged out 3 The login status is only a snapshot taken when the page is loaded Click the Refresh button to reload the current login status Copyright 2007 Education Bureau The Government of the HKSAR Page 42 All Rights Reserved WebSAMS User Manual Version 1 3 2 1 7 Maintain Internet Access Time Profile e This use case allows school users setup the internet access time profile s and then assign user account s to the profile s according to their needs Built in User Groups namely SCHOOL_HEAD SYSTEM_ADMIN CLERK SENIOR_TEACHER and TEACHER should have the access right for Internet Access Time Profile e 3 built in profiles STAFF OTHERS PARENT and STUDENT which cannot be deleted with the following setting is provided Weekday All Period Time 24 Hours wns e By default user accounts i e ex
103. t display effect upload circular image of 140 x 140 pixels School Building Right Image For best display effect upload image of 200 Q00 pixels Computer Lesso School Logo School Logoyfor best display Affect upload image of 34 x 40 pixels English Logo 7 2 The system comes with several images for the Central Image and the Right Image To upload a new Central Image Right Image School Logo click the corresponding Add button The Upload Image pop up window will be shown Copyright 2007 Education Bureau The Government of the HKSAR Page 64 All Rights Reserved WebSAMS User Manual Version 1 3 S SEC18 02 Security gt Configuration gt System Customization gt Upload Image File Name Eng Name Chi Image File Browse 3 Enter the English and Chinese image names and then click Browse button to select an image file Click Upload button to upload the image to WebSAMS After successful uploading the image name will appear in the corresponding image s drop down list box 4 After the image has been successfully uploaded it will not be displayed automatically User has to select the image file in the drop down list box and click Save button to save the change for the image to take effect 5 To delete an uploaded Central Image Right Image School Logo select the image to be deleted from the drop down list box and click Delete button The image would be permanently
104. t value is 10 MB 23 Maximum number of Retry for Sending Mail e This setting controls maximum number of trials for the system to send any outgoing E Mail e The default value is three 24 Location Path and Password of Organizational e Cert for Digital Signature e The school may use an e Cert to digitally sign all the outgoing E Mails for authentication purpose These two settings allow the school to enter the e Cert information If the school is not going to use e Cert for signing E Mails there is no need to fill in the information e f e Cert is used the e mail address in the e Cert will be displayed as the Sender s e mail address for all mails sent out from WebSAMS e There is no default value for these two settings 25 Size Limit of Audit Trail stored in Database MB e The maximum database space used for storing Audit Trail in Megabytes e When the assigned database space is full the school can choose to archive the audit trail records as Archived Audit Trail files After the archive process the audit trail records which have been archived will be permanently deleted from the database Copyright 2007 Education Bureau The Government of the HKSAR Page 59 All Rights Reserved WebSAMS User Manual Version 1 3 e f usage of space exceeds 80 of this limit warning message will be shown to users of the SYSTEM_ADMIN group when they login e Zero value means no limit The default value is 1 MB 26 Size Limit of Archived
105. te button LQ Post effects User accounts will be removed from the special user group of Score Capture Team LO Notes N A Capture Score Option L Function Description User can select entry of scores by Subject teacher by Class Teacher or by Score Capture Team through the Special Team Maintenance function L Pre requisites N A L User Procedures 1 Click Security gt Access Control gt Special Team on the left menu 2 Click Capture Score Option tab 3 Check the check box es to grant the score entry rights to the groups Copyright 2007 Education Bureau The Government of the HKSAR Page 20 All Rights Reserved WebSAMS User Manual Version 1 3 B S SEC11 03 Security gt Access Control gt Special Team gt Capture Score Option Capture Score Opon E Capture Score Option m by Class Teacher F by Cl Teach A by Score Capture Team m by Subject Teacher Note Only Score Capture Team can capture the results of past years 4 Click Save button Post effects If an option has been checked members of the selected user groups or user types can enter assessment scores Notes 1 Capture Score Option is used to control which kinds of users subject teacher class teacher or Score Capture Team have the rights to enter assessment scores 2 Data Access Control e Score Capture Team can enter the scores of all subjects for all classes e Subject Teacher can enter the scores of t
106. the image file and click the Save button for the image to take effect The school logo will be displayed at the top left of the page School name image will be displayed at the top left of the page If school logo has been uploaded and selected school name image will appear at the right of the school logo 4 Only JPEG and GIF image file formats are supported and the file size should not be more than 100KB Copyright 2007 Education Bureau The Government of the HKSAR Page 66 All Rights Reserved WebSAMS User Manual Version 1 3 2 3 Report amp Log 2 3 1 Audit Trail This function allows a user to view or download the audit trail which records the important transactions made in the system The user can also choose to archive the audit trail records into audit trail files wnen the system is running out of disk space After the archive action the corresponding audit trail records will be deleted from the database so as to release disk space In addition user can also download or delete the archived audit trail files View Audit Trail L Function Description User can view or download the Audit Trail records through the Audit Trail function B Pre requisites The audit trail records the access to functions and all updates made to sensitive data in the database In each audit trail record information such as user ID time stamp name of the function accessed action performed before image and after image
107. time inside SAMS LAN segment onday Saturday 24 Hours Default value 0700 2300 unday 24 Hours Default value 0700 1800 System access time outside SAMS LAN segment e g ITED LAN or Internet onday Saturday o oo Joo z to 00 Joo 7 24 Hours Default value 0700 2300 unday 0 X R 24 Hours Default value 0700 2300 Release of Access Time Control to 24 Hours override both System Access Time and User Account Access Time settings User Types with Release Period 0 DDMMY YYY chool s E Mail Address for Return of E Mail fweksamsuat emb gov hk Recipients Mandatory if e Cert is not available If e Cert has been installed and Location Path amp assword have been entered E Mail Address of the Cert will be used as School s E Mail Address SMTP Server of ISP subscribed by School Jrabox hk ncs i 0ona E Mail Account provided by ISP subscribed Jroarkmnak assword of the E Mail Account provided by asec Mail Recipient Limit for each mail Default value 50 ize Limit of each E mail MB Default value 1 MB ize Limit for Storing Each User s Sent Mails f5 MB Default value 10 MB ximum number of Retry for Sending Mail f3 Default value 3 ocation Path of Organisational e Cert for igital Signature Password of Organisational e Cert Copyright 2007 Education Bureau The Government of the HKSAR Page 55 All Rights Reserved WebSAMS Us
108. tion Description This use case allows school users to copy internet access time profile s L Pre requisites 1 The user must be logon first 2 Users belong to a user group with Internet Access Time Profile Execute right can process this function D User Procedures 1 Click Security gt Access Control gt Internet Access Time Profile on the left menu 2 Select a profile to copy by selecting a checkbox at the left hand side of the profile name 3 Click Copy button 4 Screen S SEC22 03 will be shown and Internet Access Time Profile ID of the selected Internet Access Time Profile will be filled Copyright 2007 Education Bureau The Government of the HKSAR Page 45 All Rights Reserved WebSAMS User Manual Version 1 3 B S SEC22 03 Security gt Access Control gt Internet Access Time Profile gt Profile Details Intemet Access Time Profile Copy Internet Access Time Profile Copy From TEST Internet Access Time Profile Profile Description Chinese Profile Description a a From 12 07 2011 24Hours DDIMMIYYYY pagas To 30 07 2011 J CE Ca o ODmmvyyy Monday Friday From a DD MMIYYYY To DD MM YYYY Saturday From Fi DD MMIYYYY To DDIMMIYYYY Sunday From F DD MM YYYY To DDIMMIYYYY Breset 24 Hours 24 Hours 24 Hours He eeaa Note 1 Length of Internet Access Ti
109. ts the system from leakage of passwords even if hackers get access to the database If the user account records are extracted from the database passwords will be displayed in encrypted form as follows Copyright 2007 Education Bureau The Government of the HKSAR Page 33 All Rights Reserved WebSAMS User Manual Version 1 3 2 E Inter QL File Edit SQL Data Tools Window Help K w gt gt websams_9006 wsadmin on websams_9006 SQL Statements SELECT FROM wsadmin TB_SEC_USER IE Messages Plan TB_LSEC_USER seq Execution time 0 015 seconds Results SUID USER_ID PASSWORD USER_CODE USER_NAME CHI_USER_NAME LANGUAGE WKDAY_LOGIN_ 9 996 asysadmin HOTFo5Y9T gvD2z3ymhJxQ Staff asysadmin asysadmin pri_all_clerk1 X03M01 qnZd dgyfeulLPm STF001 Chan tai man RAI sysadmin HOTFo5Y9T gvD 2z3yrmhJxQ Staff sysadmin sysadmin pri_all_clerk2 X03M01 qnZd dgyfeulLPm STFOO1 Chan tai man RAI pri_all_clerk3 X03M01 qnZdYdgyfeulLPm STFOO1 Chan tai man RAX pri_all_principal X03MO1qnZdYdgyfeulLPm STFOO1 Chan tai man RAI pri_all_sen_tcher1 X03MO1qnZdYdgyfeullLPmQ STFOO2 Chan tai man MAX pri_all_sen_tcher2 X03M01 qnZdYdgyfeulLPmQ STFOO2 Chan tai man RAX pri_all_sen_tcher3 X03M01 qnZdYdgyfeullLPmQ STFOO2 Chan tai man RAI pri_all_sys_admin X03M01 qnZdYdgyfeullLPm STFO02 Chan tai man RAR pri_all_teacher1 XO3MO1qnZdYdgyfeulLPmQ STFOO2 Chan tai man PRAT pri_a
110. ups all functions under the applicable modules will be listed and those non applicable modules will not be shown corresponding to the User Group on line function For user defined groups all modules functions will be listed except functions under the Customization module 3 Access right setting of Y means having access right N means no access right and means the right not applicable 4 Report supports selection of multiple built in or user defined user groups Successful Login Log Report R SEC004 A Function Description Under the Login Log report category this report lists out the details of any successful login attempts 4 Pre requisites Adobe Acrobat Reader and Microsoft Office should be installed in the workstation in order to view the report User Procedures 1 Select Successful Login Log Report from the report selection page Click on the template link to go to the report parameter screen S SEC09 05 Security gt Report amp Log gt Report Successful Login Log R SEC004 E Built in Template Please input the print criteria Date Range From To DD MM Y YYY DD MMIYYYY 05 08 2015 05 08 2015 Format POF Preview amp Print E Reset lt Back 2 Specify the date range within which all the successful login attempts will be included in the report 3 Select the format of the report to be one of PDF Word RTF Excel 4 Click Preview amp Print button to
111. vernment of the HKSAR Page 58 All Rights Reserved WebSAMS User Manual Version 1 3 e f e Certificate has been installed and Location Path amp Password have been entered E Mail address of the e Certificate will be used as the school s Return E Mail Address 18 SMTP Server of ISP subscribed by School e All E Mails are sent out from WebSAMS via the SMTP server provided by an ISP To access the SMTP server the school needs to use the E Mail account and the corresponding password provided by the ISP e No default value for the SMTP server 19 E Mail Account and Password of the E Mail Account provided by ISP subscribed e The E Mail Account and its password provided by the ISP to the school for accessing the SMTP server to send out E Mails from WebSAMS e No default value for the E Mail Account and password 20 E Mail Recipient Limit for each mail e If the number of recipients of an E Mail is larger than this limit the E Mail will be sent out by batch Each batch will contain the number of recipients equal to the Recipient Limit e The default value is 50 The school has to check with the ISP to which the school subscribes what is the appropriate value for this limit 21 Size Limit for each E Mail Mega Byte MB e The maximum size of each outgoing E Mail e The default value is 1 MB 22 Size Limit for Storing Each User s Sent Mails MB e The maximum size available for storing each user s sent E Mails in Megabytes e The defaul
112. when the system is running out of disk space After the archive action the corresponding audit trail records will be deleted from the database so as to release disk space In addition user can also download or delete the archived audit trail files View Audit Trail B Function Description User can view or download the audit trail which records the daily transactions user group assignment or access right maintenance of Staff module through the Staff Audit Trail function LL Pre requisites The Staff audit trail records the access to functions and all updates made to sensitive data related to Staff module In each audit trail record information such as user ID time stamp name of the function accessed action performed before image and after image of data will be logged B User Procedures Click Security gt Report amp Log gt Staff Audit Trail on the left menu Click View tab Select Audit Trail Type to be viewed S SEC21 01 Security gt Report amp Log gt Staff Audit Trail gt View Audit Trail Type Daily Transaction Log User Group Assignment Log C Access Rights Maintenance Log 3 From To DDMMIYYYY DDMMIYYYY ooz fo1m4r2003 iew Fill in the date range of the audit trails to be viewed or downloaded Click View button at the bottom of the page Click Open button to open the file The audit trail will be shown in MS Excel format B Post effects The audit trail recor
113. y gt Report amp Log gt View Backup Log Log File Data backup recovery log lt Creation Modify Date From To of Log File OD MMI YYY s DDMMIYY YY 0105 2003 15405 2003 iew Note Please go to the corresponding file path in the WebSAMS Server to delete a log file The file path is recorded in the function of System Configuration List of log files for the above period backup log A F Click on the links of the log files for downloading Log File Link 5 Click the log file link to download open the file Post effects The corresponding log files will be listed below the search criteria in the same page The user can view the log files or download them Notes 1 The log files contain only the summary of backup recovery operations carried out in the WebSAMS server The summary includes date time of the operations and whether the operations are successful or not 2 The file format of the server backup log file is dependent on the server backup tools used 3 Size limitation for database backup recovery log and server backup recovery log is set in System Configuration function If the size has reached Copyright 2007 Education Bureau The Government of the HKSAR Page 95 All Rights Reserved WebSAMS User Manual Version 1 3 80 of its limitation an alert message will be displayed after users of the SYSTEM_ADMIN group login to WebSAMS 4 No deletion function of the logs is provided User has to g

USER MANUAL Security - Websams Central Document Repository

Contents

Download Pdf Manuals

Related Search

Related Contents