Securing QuoteWerks product cost information
A client just called to ask what would be the best way of preventing certain users from seeing product Cost and Margin information in their QuoteWerks system.
There are several, quite straightforward ways that immediately came to mind…
1) Remove the Product Cost information from the QuoteWerks Document Items grid
Log into QuoteWerks as the user that you do not want to see the Product Cost and Margin information and use the QuoteWerks View menu | Customize Columns option to remove fields such as Unit Cost, Extended Cost, Alternate Cost, etc.
2) Do not allow users to see the Total Cost or Profit amounts
Log into QuoteWerks as an Administrator user and use the Utilities menu | User Maintenance screen | Edit User Properties window to:
- Remove the ‘User has master rights’ option from the Login tab.
- Remove the ‘Reports’ option from the Menus tab (plus any other options that you don’t want the new user to get at).
- Tick the indicated options on the Access tab (plus any other that may be appropriate).
3) Stopping Users Exporting QuoteWerks Product information
Finally, user could get access to this information by exporting the QuoteWerks Product database. To prevent this, then within the QuoteWerks User setup (see Utilities menu | User Maintenance option) select the User, click Edit, Access tab is the ‘CannotExportProducts’ option. Ticking this option will revoke the User’s ability to Export Products from the Products menu | Product Data Sources list.
Also within QuoteWerks User setup Menus tab, uncheck the Tools menu ‘Export Items to Clipboard’ and ‘Export Items to Microsoft Excel’ menu options. This will hide these options from the Tools menu when the User logs in, therefore not allowing them access to these functions.
Other techniques to lock down QuoteWerks
Do you have any thoughts on other areas that need to be locked down?
Please share by commenting here and helping other companies make their QuoteWerks sales quoting system more secure.
Thanks.
Tags: QuoteWerks, quotewerks support


ADDITIONAL: the Cost column also needs to be removed from the QuoteWerks Product column list when previewing Products. The list of columns that are displayed are in the QuoteWerks Users username.ini file (see the QuoteWerks installation directory on your PC or server).
Depending on your Product Data Source, the column list may have a different group header. The below represent the defaults for a QuoteWerks native product data source and you would want to remove the Cost and Cost Modifier columns from this list:
[Native Product Columns]
ManufacturerPartNumber=2400
VendorPartNumber=1500
Notes=4770
Cost=1500
CostModifier=1500
Price=1500
PriceModifier=1500
List=1500
Description=4005
Manufacturer=1500
Availability=1500
Category=1500
TaxCode=1500
UnitWeight=1500
UnitofMeasure=1500
UnitofMeasureFactor=1500
UnitofPricing=1500
UnitofPricingFactor=1500
Vendor=1500
ItemType=1500
FolderList=1500
SerialNumber=1500
CustomText01=1500
CustomText02=1500
CustomText03=1500
CustomText04=1500
CustomText05=1500
CustomText06=1500
CustomText07=1500
CustomText08=1500
CustomText09=1500
CustomText10=1500
CustomMemo01=1500
CustomMemo02=1500
CustomDate01=1500
CustomDate02=1500
CustomNumber01=1500
CustomNumber02=1500
Note: the numbers represent the column width
Note: if the [Native Product Columns] key group does not exist, then create it with the appropriate key fields that you would like to user to be able to view.