User Accounts From AD Are Appended By \ At The End So Users Are Not Able To Access Documents (Doc ID 2322620.1)

Last updated on NOVEMBER 02, 2017

Applies to:

Oracle WebCenter Content - Version 12.2.1.0.0 and later
Information in this document applies to any platform.

Symptoms

On : 12.2.1.2.0 version, Content Server

ACTUAL BEHAVIOR
---------------
User Accounts from AD are appended by \ at the end so users are not able to access documents

WCC 12c server is integrated with AD server. Users are getting expected accounts from AD but before assigning the accounts to user the account names are added with a \ at the end. Due to this users are not able to access documents for the desired account.


-----------------------
For example - the account name in AS is UCM_LegalEntities/MISC#r, the account permission delimiter is #. The final account being assigned to user is UCM_LegalEntities/MISC\(r). Which has an extra \ at the end. This is making the user being denied permission to account UCM_LegalEntities/MISC
 

EXPECTED BEHAVIOR

STEPS
-----------------------
The issue can be reproduced at will with the following steps:
1. Configure JPS provider adding AcctPrefix and RolePrefix to filter roles and accounts
2. Change account permission to #
3. Test by logging in with user member of account having # as permission delimiter

BUSINESS IMPACT
-----------------------
The issue has the following business impact: using special character # as account permission delimiter will not give correct permissions
Due to this issue, users cannot access documents or folders based on accounts permissions

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms