User Accounts From AD Are Appended By \ At The End So Users Are Not Able To Access Documents (Doc ID 2322620.1)

Last updated on MAY 03, 2023

Applies to:

Symptoms

On : 12.2.1.2.0 version, Content Server

ACTUAL BEHAVIOR
---------------
User Accounts from AD are appended by \ at the end so users are not able to access documents

WCC 12c server is integrated with AD server. Users are getting expected accounts from AD but before assigning the accounts to user the account names are added with a \ at the end. Due to this users are not able to access documents for the desired account.


-----------------------
For example - the account name in AS is UCM_LegalEntities/MISC#r, the account permission delimiter is #. The final account being assigned to user is UCM_LegalEntities/MISC\(r). Which has an extra \ at the end. This is making the user being denied permission to account UCM_LegalEntities/MISC
 

EXPECTED BEHAVIOR

STEPS
-----------------------
The issue can be reproduced at will with the following steps:
1. Configure JPS provider adding AcctPrefix and RolePrefix to filter roles and accounts
2. Change account permission to #
3. Test by logging in with user member of account having # as permission delimiter

BUSINESS IMPACT
-----------------------
The issue has the following business impact: using special character # as account permission delimiter will not give correct permissions
Due to this issue, users cannot access documents or folders based on accounts permissions

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.