My Oracle Support Banner

Moving Content or Folders with "Auto Propagate" Causes Merged Security on Metadata Values (Doc ID 1954678.1)

Last updated on MARCH 08, 2023

Applies to:

Oracle WebCenter Content - Version and later
Information in this document applies to any platform.


When a Move operation is performed and the Auto Propagate option is selected, security fields are not blanked out if they are empty on the new parent folder. Instead, they keep their old values.

This can cause security issues, because the security values are essentially merged.

For example:

Security Group: Internal
Account: Account1

Security Group: Secure
Account: <Blank>

Folder1 is moved to Folder2 with the Auto Propagate option selected.

Folder1 now has:
Security Group: Secure
Account: Account1

There may be no users who have access to that combination of Security Group and Account, but the old Account value was kept since the new folder had no value set for Account.


To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.