Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Excerpt

A&S IT provisions and supports CCB's ChemGrades FMPro DB. They also created and support ChemGrades web site showing read-only sub-data from DB, restricted by NetIDs.

 

Table of Contents

Terms

  • DB = database. As in FMPro DB.

Support and maintenance expectations (DRAFT)

...

  • Zero out course data on the A&S FMPro server.
  • Import data from the correct course backup file.
    • Latest version would be from ~half a work day before.
  • If Pat Hine needs backup data older than what she has access to herself (> 7 days, so rare), she must contact A&S IT (Dani or Tu) for them to get via back-ups of the SQL server data (or from EZ-Backup).
    • Note that A&S IT's EZ-Backup would itself only have the 3 prior versions. If course DB was changed each day, that's just three backups. If course DB rarely changed, then that can be a long time.

Outstanding actions required?

Make appropriate changes to source FMPro data

  • Change all TA access to be by NetID (and FMPro p/w), instead of their name.
    • This keeps the access process the same as it was, but:
      • Enables the correct access restrictions via the web application.
      • Facilitates transition to true NetID-based access, as a future project.

Establish procedure for PatH to update web-hosted data. "Push the button".

As of 8/16/13, function doesn't exist for PatH.

  • Requires ODBC connection. Not possible at FMPro server; must be set up at FMPro client's computer.
    • Do for PatH's computer. As backup, do on Sam's computer.
    • Current plan: For each computer, set ODBC up as system's Admin (vs. user) so ODBC accessible/ configured for any computer account.

Enable Pat's view of DB data from home.

The need for this has been reduced since many folks can self-serve, and PatH herself has view-only web access.

  • Although the web version may be OK for view-only of some data, it's obviously not as flexible for searching. And there is no way for PatH to make changes through the web version.
  • On accasions when PatH needs full access, we will enable Remote Desktop on PatH's main work computer. This way she can do everything she can do when she's at work.
    • She access her computer from off-campus via VPN.

As an alternative, if she knows she'll need it ahead of time, PatH can take a backup copy of any course on a FMPro computer for stand-alone access. This works as long as PatH doesn't make changes on the stand-alone DB that she later expects to see on the production, server-based DB, of course!

Rejected idea, for future reference: With FMPro installed on dept. laptop, access AS's FMPro server off-campus and do the work that way.

Ensure security of FERPA data in Grades DB.

See Michael Hint's emails with Tu and Frank for more on this. Some thoughts, initially:

  • FERPA-like data so ChemIT would appreciate understanding the ACL (see for subnet?) and firewall configurations.
    • ChemIT thinks there shouldn't be any off-campus access except via VPN. Thus take off of public net and put into 10-space. But there may be other factors to consider.
  • Access to the FMPro DB is controlled by NetID (AD groups). Once in, who else has access to Grades DB FMPro DB itself?
    • Answer: Only accessible to authorized FMPro users or groups.
      • If a user isn't authorized for a DB, they dont' even get to see that the DB is available.
      • If a user enters the fully qualified name to the DB they can't see (because they aren't authorized within the DB), the DB still wont' open.
  • Ideal: Make all access via NetID/ NetID p/w, not via FMPro DB's own controls.
    • Control NetID membership via Active Directory groups.
      • Start with Grad TA access, via theTA room kiosks? Also start with faculty access?
      • Once process confirmed, establish procedure for enabling and disabling NetID access to Grades FMPro DB by grads and faculty
        • Can take ChemIT staff less than a minute to do this, and is effective immediately.
  • Confirm FMPro server access is correct: Functional and secure.
    • Confirm that only permitted staff can access Grades (and other CCB) DBs.
    • Confirm Becky can see what she needs to see.
      • Add a read-only account for Becky.
      • Becky will still be able to exports her data, but no longer using PatH'/ the Admin account.
    • Confirm TAs can see/ edit what they need to edit for the TA room's computers.

See also

...