Users Without Read User Privilege Can See the List of Change Analyst Users in the Create Change Window (Doc ID 2151658.1)

Last updated on FEBRUARY 15, 2017

Applies to:

Oracle Agile Product Collaboration - Version 9.3.4.0 to 9.3.5.0 [Release 9.3]
Information in this document applies to any platform.

Symptoms

Actual Behavior

In 9.3.4, Users without the Read Users privilege are still able to see the list of Change Analyst users when creating a new change request.

Expected Behavior

Users without the Read Users privilege should not be able to see the list of Change Analyst users when creating a new change request.

Steps to Reproduce:

The issue can be reproduced with the following steps:

Test case preparation:
1. Configure a role with:
- no Discover or Read privilege to Users
- Create, Read, Modify access to Change Requests
2. Assign the role to the user
3. Configure at least one different user with the Change Analyst list

Steps:
1. Login WebClient as the user with restricted access to Users
2. Create a Change Request

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms