Mobile Timesheets Module Security Considerations

Estimate installations may span across multiple servers which must be able to communicate with one other. For example:

  • Services and Web applications require read and write access to databases.

  • Services that attach and detach database files require the SQL Server sysadmin role.

  • Services that start and stop SQL Server require the SQL Server sysadmin role.

  • Services and Web applications require read access to folders where application files reside.

Every service and Web application is assigned an identity under which it runs.

  • For a Service – the identity is defined on the Log On tab in the service’s Properties dialog box.

  • For a Web Application – the identity is defined by assigning the application to an application pool, and then defining the application pool’s identity in the pool’s Advanced Settings.

By default, services use identities that only have access to the local machine, such as the local System account. Local accounts cannot access resources on other computers. Since Estimate components must access resources (e.g., folders, files or service commands) on other computers, the default identities for all Estimate services must be changed.

It is recommended that you create a single network account for Estimate in Active Directory, and use it for all Estimate services. Give the account Log on as a service rights. On the Estimate SQL Server, add this account as a SQL Login and grant it the sysadmin role.

For Estimate Web applications, use the ASP.NET v4.0 application pool or create a new one just like it, and let that application pool use its own Application Pool Identity. Define credentials for accessing SQL Server in the application’s web.config file.

Timesheet Synchronization Web User Authentication Method

The Timesheet Synchronization web application is designed to use Integrated Windows Authentication to allow user access. To access the site, a user who is not already logged on to the network (or the web server itself) will have to provide a user name and password.

Database Connections Planning Considerations

Consider these questions as a planning worksheet prior to installing the Mobile Timesheets Module.

Section

Description

DB. 1

What is the name of your Estimate database server computer?

DB. 2

What is the SQL Server instance name?

DB. 3

Where will your data be stored?

Your database and log files must reside in the same folder where your Estimate jobs and library data reside. The default location is C:\Program Files\InEight\ InEight Estimate\Jobs on the database server.

DB. 4

What SQL Server login will your Mobile Timesheets Web server use to connect to the SQL Server?

Create this SQL Server login in advance. Make note of the user name and password.

Mobile Timesheets Application Settings Considerations

Section

Description

W.1

What is the name of your Estimate Web server computer?

W.2

Under what website will you create the Mobile Timesheets application?

By default, the Default Web Site will be used, but you can specify a different site during installation.

W.3

What will you name the Mobile Timesheets application? (The default name is HDTime).

W.4

What application pool will the application be assigned to?

W.5

Where will you place the Mobile Timesheets home directory?

The default location is C:\inetpub\wwwroot\Hard Dollar\TimesheetSyncHandler.

W.6

What is the name of the computer where the InEight Estimate License Server runs?

By default, the License Server uses port 8010.