> For the complete documentation index, see [llms.txt](https://docs.navigaglobal.com/circulation-setup-manual/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.navigaglobal.com/circulation-setup-manual/system/security-menu/transaction-security.md).

# Transaction Security

You can set up security for some specific transactions (such as adding addresses) within the Circulation Services menu. First, you must establish user IDs, user groups, and security IDs. Then, using this option, you can limit specific transactions to only those users with a specific security ID. Only one security ID can be assigned to a transaction type. If you want to change who has access to this transaction, you may have to set up a new security ID with different groups associated with it.

You can also implement data masking using transaction security.

{% hint style="info" %}
**Note:** *You cannot add or delete transaction security items. Also, when modifying an item, only the security ID can be changed.*
{% endhint %}

#### To secure transactions:

1. Select **Transaction Security** from the Security menu to display the Transaction Security window.<br>

   <figure><img src="https://2165740141-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F5MIKWQvI2WSa0XQfA9VW%2Fuploads%2FRMxSu7WmHgwka8R7rzvy%2FTransaction%20Security.png?alt=media&amp;token=d36237d2-e2c4-482d-80d8-be2836f8c32a" alt=""><figcaption></figcaption></figure>
2. Select a security item in the list and click the **Modify** icon.
3. Select a security ID from the Security combo box. Only users that have this security ID will be able to carry out this transaction.
4. Click **OK** to apply this security ID to the transaction.

## Transaction Security Items

<table><thead><tr><th width="245">Security Item</th><th>Description</th></tr></thead><tbody><tr><td>AAMHistDrawAdj</td><td>Use the draw adjust code for AAM history adj</td></tr><tr><td>ACBatAccountPmt</td><td>Accept account payment batch</td></tr><tr><td>ACBatMiscCharge</td><td>Accept misc. charge batch</td></tr><tr><td>ACBatRefund</td><td>Accept refund batch</td></tr><tr><td>ACBatReject</td><td>Account Payment Accept</td></tr><tr><td>ACBatRtDrawAdj</td><td>Accept route draw adjust batch</td></tr><tr><td>ACBatRtReturn</td><td>Accept route return batch</td></tr><tr><td>ACBatSCDrawAdj</td><td>Accept draw adjust batch</td></tr><tr><td>ACBatSCReturn</td><td>Accept return batch</td></tr><tr><td>ACBatSubscrPmt</td><td>Accept subscriber payment batch</td></tr><tr><td>AcctRateImpEdit</td><td>Account Rate Import edit</td></tr><tr><td>AcctWrittenOff</td><td>Allow accounts to be written off</td></tr><tr><td>AddressAdd</td><td>Add an address</td></tr><tr><td>AddressDigitMod</td><td>Modify - Address (Digital)</td></tr><tr><td>AddressMod</td><td>Modify - Address (Physical)</td></tr><tr><td>AllowDrwChgOvrd</td><td>Override Setup field for draw changes</td></tr><tr><td>APCollectorPmt</td><td>Create collector payment</td></tr><tr><td>APInvoiceApply</td><td>Select the “invoice” application method</td></tr><tr><td>ARS-Add</td><td>Allow add in Account Rate Setup</td></tr><tr><td>ARS-Delete</td><td>Allow delete in Account Rate Setup</td></tr><tr><td>ARS-Modify</td><td>Allow modify in Account Rate Setup</td></tr><tr><td>AS-Account</td><td>Allow accounts to be updated in Account Services</td></tr><tr><td>AS-Change</td><td>Allow accounts to be changed in Account Services</td></tr><tr><td>ASDisputeInv</td><td>Allow account invoices to be disputed</td></tr><tr><td>AS-Distribution</td><td>Allow distribution to be added/modified in Account Services</td></tr><tr><td>ASInvResolve</td><td>Allow invoice disputes to be resolved</td></tr><tr><td>AS-Levy</td><td>Allow levies to be updated in Account Services</td></tr><tr><td>AS-Notification</td><td>Allow notifications to be updated in Account Services</td></tr><tr><td>AS-Recurring</td><td>Allow recurring charges to be updated in Account Services</td></tr><tr><td>AS-Terminate</td><td>Allow accounts to be terminated in Account Services</td></tr><tr><td>ASViewAcctPmts</td><td>View monetary amounts for accounts in Route Service</td></tr><tr><td>AuthNumEntry</td><td>Enter credit card authorization numbers</td></tr><tr><td>AuthNumEntryBD</td><td>Modify – Authorization and Transaction ID fields for Bank Draft payments in Customer Service</td></tr><tr><td>AutoAccptBatch</td><td>Override auto-accept batch setting</td></tr><tr><td>BusRuleEncrypt</td><td>View encrypted Business Rule settings</td></tr><tr><td>CanSendEmail</td><td>Can Send Emails</td></tr><tr><td>CanUseCredCard</td><td>Enter CC payment and auto-renew</td></tr><tr><td>CCSurchargeOvrd</td><td>Allow subscriber credit card surcharge to be waived</td></tr><tr><td>ChargeAccount</td><td>Charge account in Dispatching</td></tr><tr><td>Chg GUI Labels</td><td>Change component labels in graphical</td></tr><tr><td>Chg GUI Layout</td><td>Change Graphical Layout</td></tr><tr><td>CRControlTotals</td><td>Modify payment control totals</td></tr><tr><td>CSABankDPayment</td><td>Add bank draft payment</td></tr><tr><td>CSACashPayment</td><td>Add cash payments</td></tr><tr><td>CSACheckPayment</td><td>Add check payments</td></tr><tr><td>CSACreditStatus</td><td>Add a subscriber credit status</td></tr><tr><td>CSACredPayment</td><td>Add credit card payments</td></tr><tr><td>CSAFormalCmplt</td><td>Add formal complaints</td></tr><tr><td>CSAGraceWO</td><td>Write off grace</td></tr><tr><td>CSAltAccount</td><td>Allow updating alternate accts</td></tr><tr><td>CSARefund</td><td>Add refund if refund available=0</td></tr><tr><td>CSBBillingChg</td><td>BackDate - Billing Method Change</td></tr><tr><td>CSBCSendInvRnwl</td><td>Modify Invoice Subscriber and Renew After This Term fields in billing change</td></tr><tr><td>CSBDelivSched</td><td>BackDate - Deliv Sched Change</td></tr><tr><td>CSBExpireChange</td><td>BackDate - Expire Change</td></tr><tr><td>CSBGraceWOff</td><td>Back Date - Grace Writeoff</td></tr><tr><td>CSBMoveIn</td><td>BackDate - Move In</td></tr><tr><td>CSBMoveOut</td><td>BackDate - Move Out</td></tr><tr><td>CSBNote</td><td>BackDate - Note</td></tr><tr><td>CSBPayment</td><td>BackDate - Subscriber Payment</td></tr><tr><td>CSBPymtCancel</td><td>BackDate - Payment Cancel</td></tr><tr><td>CSBRefund</td><td>Back Date - Refund</td></tr><tr><td>CSBRefundWOff</td><td>Back Date - Refund Writeoff</td></tr><tr><td>CSBRenewal</td><td>BackDate - Renewal</td></tr><tr><td>CSBReroute</td><td>BackDate - Route Reassignment</td></tr><tr><td>CSBRestart</td><td>BackDate - Restart</td></tr><tr><td>CSBStart</td><td>BackDate - Start</td></tr><tr><td>CSBStop</td><td>BackDate - Stop</td></tr><tr><td>CSBTempAddrEnd</td><td>BackDate - End Temp Add</td></tr><tr><td>CSBTempAddress</td><td>BackDate - Temporary Address</td></tr><tr><td>CSBTransferOut</td><td>Back Date - TransferOut</td></tr><tr><td>CSCancelGrpPymt</td><td>Cancel Group Payment</td></tr><tr><td>CSDBillingChg</td><td>Delete - Billing Method Change</td></tr><tr><td>CSDBonusDay</td><td>Delete - Bonus Days</td></tr><tr><td>CSDComplaint</td><td>Delete - Complaint</td></tr><tr><td>CSDContact</td><td>Delete - Contact</td></tr><tr><td>CSDDelivSched</td><td>Delete - Delivery Sched Change</td></tr><tr><td>CSDFComplaint</td><td>Delete - Formal Complaint</td></tr><tr><td>CSDMoveIn</td><td>Delete - Move In</td></tr><tr><td>CSDMoveOut</td><td>Delete - Move Out</td></tr><tr><td>CSDPayment</td><td>Delete - Subscriber Payment</td></tr><tr><td>CSDReroute</td><td>Delete - Route Reassignment</td></tr><tr><td>CSDRestart</td><td>Delete - Restart</td></tr><tr><td>CSDReward</td><td>Delete - Reward</td></tr><tr><td>CSDStart</td><td>Delete - Start</td></tr><tr><td>CSDStop</td><td>Delete - Stop</td></tr><tr><td>CSDTempAddrEnd</td><td>Delete - End Temp Address</td></tr><tr><td>CSDTempAddress</td><td>Delete - Temporary Address</td></tr><tr><td>CSDTransferOut</td><td>Delete - Transfer Out</td></tr><tr><td>CSMAAMColumn</td><td>Modify - AAM Column</td></tr><tr><td>CSMAAMZone</td><td>Modify - AAM Zone</td></tr><tr><td>CSManualRefund</td><td>Allow Manually Issued Refunds</td></tr><tr><td>CSMAutoRenew</td><td>Modify - Auto Renew</td></tr><tr><td>CSMBillingChg</td><td>Modify - Billing Method Change</td></tr><tr><td>CSMComplaint</td><td>Modify - Complaint</td></tr><tr><td>CSMContact</td><td>Modify - Contact</td></tr><tr><td>CSMCreditStatus</td><td>Modify - Subscriber Credit Status</td></tr><tr><td>CSMDelivSched</td><td>Modify - Delivery Sched Change</td></tr><tr><td>CSMEndGrace</td><td>Modify - End GracePeriod</td></tr><tr><td>CSMExpire</td><td>Modify - Expire</td></tr><tr><td>CSMExtendDays</td><td>Modify - Complaint Extension</td></tr><tr><td>CSMFeeOptOut</td><td>Modify-Printed Bill Fee OptOut</td></tr><tr><td>CSMFeeWaiveOff</td><td>Modify - Fee Waive Off</td></tr><tr><td>CSMFeeWriteOff</td><td>Modify - Fee Write Off</td></tr><tr><td>CSMFmlComplaint</td><td>Modify - Formal Complaint</td></tr><tr><td>CSMMerchDate</td><td>Modify Merchandise Fulfill Dt</td></tr><tr><td>CSMMoveIn</td><td>Modify - Move In</td></tr><tr><td>CSMMoveOut</td><td>Modify - Move Out</td></tr><tr><td>CSMNewPswdBtn</td><td>Modify - NewPswdBtn</td></tr><tr><td>CSMNote</td><td>Modify - Note</td></tr><tr><td>CSMPayment</td><td>Modify - Subscriber Payment</td></tr><tr><td>CSMPymtCancel</td><td>Modify - Payment Cancel</td></tr><tr><td>CSMReqRefund</td><td>Modify - RequestedRefund</td></tr><tr><td>CSMReroute</td><td>Modify - Route Reassignment</td></tr><tr><td>CSMRestart</td><td>Modify - Restart</td></tr><tr><td>CSMReward</td><td>Modify - Reward</td></tr><tr><td>CSMStart</td><td>Modify - Start</td></tr><tr><td>CSMStop</td><td>Modify - Stop</td></tr><tr><td>CSMTempAddrEnd</td><td>Modify - End Temp Address</td></tr><tr><td>CSMTempAddress</td><td>Modify - Temporary Address</td></tr><tr><td>CSMTransferOut</td><td>Modify - Transfer Out</td></tr><tr><td>CSMTrial</td><td>Modify - Trial</td></tr><tr><td>CSMWriteOffType</td><td>Modify - WriteOffType</td></tr><tr><td>CSOComplaint</td><td>Override Complaint Code after processing</td></tr><tr><td>CSPriceQuote</td><td>Enable Create Quote button and RENEW flag</td></tr><tr><td>CSReasnOverride</td><td>Override Reason Codes</td></tr><tr><td>CSSBFBBillChg</td><td>Show - BalFwd Billing BillChg</td></tr><tr><td>CSSComboTransfr</td><td>Show - Combo Transfer</td></tr><tr><td>CSSGraceAccrual</td><td>View Grace Accruals in Customer Service</td></tr><tr><td>CSSMarketTerm</td><td>Show marketing terms</td></tr><tr><td>CSUComplaintEnd</td><td>Can update complaint end date</td></tr><tr><td>CVV2Entry</td><td>Can override the CVV2 for a payment</td></tr><tr><td>DayPassMakeGood</td><td>Enter day pass make goods in Customer Service</td></tr><tr><td>DidNotOrderOvrd</td><td>Override rules for “did not order” reason codes</td></tr><tr><td>DigiAccDrawAdj</td><td>Create draw adjustment with the adjustment code specified for Digital Access Draw in the Business Rules</td></tr><tr><td>DispatchOvrride</td><td>Override dispatch cutoff</td></tr><tr><td>DistribMaintBkp</td><td>Use the Distribution Maintenance Backup option</td></tr><tr><td>DistribMaintDte</td><td>Allow right click Show Dates</td></tr><tr><td>DistribMaintSes</td><td>Bypass Distribution Maintenance session backup</td></tr><tr><td>DistribMaintUpd</td><td>Modify Information in Distribution Maintenance</td></tr><tr><td>DrwLockOverride</td><td>Override draw change lockouts</td></tr><tr><td>DrwToleranceOvr</td><td>Override draw change tolerances</td></tr><tr><td>FCDComplaint</td><td>Modify formal complaint date</td></tr><tr><td>FCTComplaint</td><td>Modify formal complaint time</td></tr><tr><td>FuturePayment</td><td>Future-date payments in Customer Service</td></tr><tr><td>GDCZeroDraw</td><td>Group Draw Change - Zero</td></tr><tr><td>GraceWOffDrwAdj</td><td>Grace writeoff adjustments using Route Adjust</td></tr><tr><td>GraceWOffUnpaid</td><td>Is Writeoff Now Unpaid (Grace Writeoff report)</td></tr><tr><td>GUIEditToolbar</td><td>Edit Graphical Toolbar Setup</td></tr><tr><td>IMDeadlineOvrd</td><td>Override IM Schedule Deadlines</td></tr><tr><td>ImportSubsRates</td><td>Import option of Export/Import Sub Rates</td></tr><tr><td>MapCSAddress</td><td>View the Customer Service address map</td></tr><tr><td>MapCSSingleCopy</td><td>View the Customer Service single-copy locator</td></tr><tr><td>MapRSRouteList</td><td>View the Route Service delivery list map</td></tr><tr><td>MapRSSingleCopy</td><td>View the Route Service single copy map</td></tr><tr><td>MapTMCampaign</td><td>View the TM campaign results map</td></tr><tr><td>MapTMProximity</td><td>Use Proximity map in Targeted Marketing</td></tr><tr><td>MsgAllEntry</td><td>Select “all” when entering messages</td></tr><tr><td>MsgBroadcast</td><td>Send broadcast messages</td></tr><tr><td>MsgDeadlineOver</td><td>Add delivery deadline override with message</td></tr><tr><td>OptOutVCRSetup</td><td>Opt out Vacation Credit Rules</td></tr><tr><td>PrintBankAcct</td><td>Display full info on the Subscriber Pmt Journal</td></tr><tr><td>PrintCreditCard</td><td>Display full info on the Subscriber Pmt Journal</td></tr><tr><td>PrintPayPal</td><td>Display full info on the Subscriber Pmt Journal</td></tr><tr><td>Program Stack</td><td>Stack Ctrl-G to display program</td></tr><tr><td>PurgeCCAudit</td><td>Purge credit card audit data</td></tr><tr><td>RateCdOverride</td><td>Override rating validation setup</td></tr><tr><td>RouteRateClass</td><td>Update a route’s rate class</td></tr><tr><td>RSBatDrawChange</td><td>Accept Batch - Route Draw Chg</td></tr><tr><td>RSDDrawChangeR</td><td>Delete - Draw Chg (Routes)</td></tr><tr><td>RSDDrawChangeS</td><td>Delete - Draw Chg (SingleCopy)</td></tr><tr><td>RSDReverseDrawR</td><td>Delete - Draw Rev (Routes)</td></tr><tr><td>RSDReverseDrawS</td><td>Delete - Draw Rev (SingleCopy)</td></tr><tr><td>RSDShortage</td><td>Delete - Shortage</td></tr><tr><td>RSMDrawChangeR</td><td>Modify - Draw Chg (Routes)</td></tr><tr><td>RSMDrawChangeS</td><td>Modify - Draw Chg (SingleCopy)</td></tr><tr><td>RSMReverseDrawR</td><td>Modify - Draw Rev (Routes)</td></tr><tr><td>RSMReverseDrawS</td><td>Modify - Draw Rev (SingleCopy)</td></tr><tr><td>RSMShortage</td><td>Modify - Shortage</td></tr><tr><td>RSShowLevy</td><td>Show account levy</td></tr><tr><td>ShowAcctTaxInfo</td><td>Show account tax information</td></tr><tr><td>ShowBankAccount</td><td>Show bank draft information</td></tr><tr><td>ShowCreateUser</td><td>Show Create User</td></tr><tr><td>ShowCreditCard</td><td>Show credit card information</td></tr><tr><td>ShowPayPal</td><td>Show PayPal information</td></tr><tr><td>SRS-Add</td><td>Allow add in Subscriber Rate Setup</td></tr><tr><td>SRS-Delete</td><td>Allow delete in Subscriber Rate Setup</td></tr><tr><td>SRS-Modify</td><td>Allow modify in Subscriber Rate Setup</td></tr><tr><td>SubRateExpImp</td><td>Access to Subscriber Rate Export/Import</td></tr><tr><td>Task</td><td>Generate Tasks</td></tr><tr><td>TaskComplete</td><td>Mark a task as complete</td></tr><tr><td>TMDrawChangeAdd</td><td>Add standing draw in TM</td></tr><tr><td>TMDrawChangeDel</td><td>Delete standing draw in TM</td></tr><tr><td>TMDrawChangeMod</td><td>Modify standing draw in TM</td></tr><tr><td>TMDrawChangePro</td><td>Process standing draw in TM</td></tr><tr><td>TrnLeadTimeOvrd</td><td>Override min. number of future-dated days</td></tr><tr><td>UnauthRetrnOvrd</td><td>Unauthorized Returns Override</td></tr><tr><td>UpdAcctActive</td><td>Change account’s bill source information</td></tr><tr><td>UpdateCollector</td><td>Modify the collector in account setup</td></tr><tr><td>UpdateCreateGL</td><td>Create GL in Unearned Revenue and Grace Due</td></tr><tr><td>UpdSubPayTerm</td><td>Update term for subscriber payment</td></tr><tr><td>VacationPack</td><td>Control vacation pack updating</td></tr><tr><td>WebCampaign</td><td>Access Web Campaign module</td></tr><tr><td>WebDrawChgOvrd</td><td>Override/reject web draw changes</td></tr><tr><td>WebDrawChgRvw</td><td>Accept/refuse web draw changes</td></tr><tr><td>WebRtrnOverride</td><td>Modify a return in a batch</td></tr><tr><td>WebRtrnRefuse</td><td>Send back a batch of returns</td></tr><tr><td>WebRtrnReject</td><td>Reject a batch of returns</td></tr><tr><td>WebRtrnReview</td><td>Accept a batch of returns</td></tr><tr><td>Website Admin</td><td>Access to iServices Subscriber Admin module</td></tr></tbody></table>

## Data Masking

Data masking is used to allow only selected Circulation users to view and print private information, while preventing all other users from doing so. Users without security rights will see “masked” information, which means that most digits of a number are replaced with asterisks. A masked credit card number, for example, will be displayed as **`************0123`**, with only the last four digits visible to the user. Users with security rights will see the whole number. The diagram below shows the level of security that data masking provides.

<figure><img src="https://2165740141-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F5MIKWQvI2WSa0XQfA9VW%2Fuploads%2FSfgusTMMGJayl9uglGDA%2FData%20Masking.png?alt=media&amp;token=84e30f35-c1d1-4c5c-a265-5972ba14d09c" alt=""><figcaption></figcaption></figure>

Note that, when using data masking alone, information is not masked in any way within the database. Any person who can access the database directly, such as a Naviga Support analyst or a developer who runs custom programs, ad hoc queries, Results queries, etc., will see the full data. Unauthorized users (i.e., “hackers”) who are able to gain access to the database will also see full data. To protect private information within the database, you must use database encryption.

### Setting Up Data Masking

Data masking is set up within Transaction Security (Setup | System | Security | Transaction Security). **By default, these items are marked NOT ACTIVATED, which means that the data for these items will be masked for all users until you “activate” access to an item for a security group.**

Four security items in Transaction Security control the masking of private data:

* **ShowCreditCard** determines which security group can view and print full credit card numbers. All other security groups will see only the last four digits of credit card numbers.
* **ShowPayPal** determines which security group can view the full PayPal VaultID and Email Address. All other security groups will see only masked data in these fields.
* **ShowBankAccount** determines which security group can view and print full bank numbers and bank account numbers. All other security groups will see only the last 2 digits of the bank number and the last 4 digits of the bank account number.
* **ShowAcctTaxInfo** determines which security group can view and print the full social security number and Tax ID of accounts. All other security groups will see only the last 4 digits of the social security number and Tax ID.

Remember, ***`all data will be masked until you perform this setup`***.