EGRC 188.8.131.5229: Menu And Submenu Global Conditions Override Set Of Books Control Condition
(Doc ID 1954358.1)
Last updated on APRIL 04, 2019
Applies to:Oracle Application Access Controls Governor - Version 8.6.5 to 8.6.5 [Release 8]
Information in this document applies to any platform.
On : Application Name : Enterprise Governance, Risk and Compliance - Advance Controls - Incidents - Global Conditions
Version : GRC-all-184.108.40.20629
AACG is used to report segregation of duties(SOD) in the business applications. When new incidents are generated for a model that was setup to include incidents only from the Vision, USA set of books the results produced are in correct if the global condition is activated to exclude Sub menu Grant flag, Function Query Only and Menu Function Grant Flag, but if the global condition is inactivated then the correct results are produced.
The expected behavior is for the application to produce correct results when the associated global condition is active.
What is Working:
When the global condition is inactivated then the correct incidents are generated.
The issue can be reproduced at will with the following steps:
1) Create an entitlement with a group of function access points to the same datasource
2) Create an access model or control and add the Access Entitlement Name and EBS Access Condition business objects
3) Map the EBS Access Condition datasource to the same datasource as the entitlement created in step 1
4) Add a filter: Access Entitlement Name equals the entitlement in step 1
5) Add a 2nd filter below it in an AND relationship:
Object: EBS Access Condition, Attribute: Ledger/Set of Books, Condition: Equals, Value: select a value with known incidents
6) Run the model
7) Create the following standard global conditions mapped to the same datasource as the entitlement in step 1 and set the status to Active:
a) Exclude Submenu Grant Flag Equals Value: N, (click the Advanced Options icon arrow and select Exclude)
b) Exclude Menu Function Grant Flag Equals Value: N, (click the Advanced Options icon arrow and select Exclude)
8) Re-run the model
9) The number of incidents increases and those incidents added were not in the same set of books that the control specified
The issue has the following business impact:
Incidents for models/controls are not being properly segregated by set of books, impacting the need to be able to differentiate between U.S. incidents, Canada and other regional incidents which they were looking to do and view as a very important part of the application functioning properly for them. Please address this.
To view full details, sign in with your My Oracle Support account.
Don't have a My Oracle Support account? Click to get started!
In this Document