Note Read Only Mechanism Not Respecting For The Attachments (Doc ID 1597601.1)

Last updated on SEPTEMBER 08, 2016

Applies to:

Oracle Demantra Demand Management - Version 7.3.1.4 to 12.2.2 [Release 7.3.0 to 12.2]
Information in this document applies to any platform.

Symptoms

On : 7.3.1.4 version, Worksheet

ACTUAL BEHAVIOR
---------------
User A is able to add new attachments and remove the attachment that user B created which is an undesirable result as user A is granted a “Ready Only” permission.

EXPECTED BEHAVIOR
-----------------------
The user A which has read only permission should not able to delete the attachment when other user is uploaded the attachment to the note

STEPS
-----------------------
The issue can be reproduced at will with the following steps:

 User A is able to add new attachments and remove the attachment that user B created which is an undesirable result as userA is granted a “Ready Only” permission.
 User B creates a note, set security permission for the note for user A to “Read Only”.
 User security filter for userA.
 User A has read only permission on the notes (as expected).
 User A has access to add and remove attachment (not expected).
 User A added an attachment (not expected).
 UserA can remove the attachment that user B created (not expected)



Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms