P90CD018 Security Bug When "implicit Save" Is Off (Doc ID 2034688.1)

Last updated on OCTOBER 22, 2015

Applies to:

JD Edwards EnterpriseOne Service Management - Version 9.0 to 9.0 [Release 9.0]
Information in this document applies to any platform.

Symptoms

On : 9.0 version, Service Mgmt. General

EXPECTED BEHAVIOR
-----------------------
To not able to save changes to a table that is secured out for the used.

STEPS
-----------------------

When using service orders we have the following configuration for users:
- P90CA000 implicit save is unchecked (off)
- User roles have "read-only" for P90CD018
- Users in this role try to do into P90CD018 to perform a change
- These users cannot click the "save" button
- These same users can select another tab to for the P90CA999 window to display
- P90CA999 allows them to press "SAVE" and commit the changes that they are NOT allowed to do
- We are not able to secure P90CA999 from these users because it is used as well for P90CD015 that they are allowed to change



Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms