My Oracle Support Banner

User Without Privileges Can See Load Plan Run Instances in ODI Console (Doc ID 2011936.1)

Last updated on SEPTEMBER 27, 2023

Applies to:

Oracle Data Integrator - Version 12.1.2.0.1 to 12.2.1. Beta [Release 12c]
Information in this document applies to any platform.

Symptoms

A user with only OPERATOR and CONNECT is able to see a list of Load Plan executions in Oracle Data Integrator (ODI) console.

To reproduce the behavior:

  1. Create a profile in ODI Studio Security Navigator with no permissions.
  2. Create a role and assign the created profile and CONNECT profile to the role.
  3. Add a user (External Authentication Principal (AD user) if external authentication is used or a simple ODI user created with no profile assigned if internal authentication is used) to the role.
  4. Use the added user to login into odiconsole web app and browse load plan executions.

This user should not be able to see load plan runs when it does not have appropriate permissions but instead is still able to view load plan runs/executions in odiconsole.

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.