Security Users Not Assigned To Any Security Group Have Access To Most MSS Functions (Doc ID 2185669.1)

Last updated on FEBRUARY 22, 2017

Applies to:

Oracle Communications MetaSolv Solution - Version 6.2.1 and later
Information in this document applies to any platform.

Symptoms

ACTUAL BEHAVIOR

Security Users not belonging to any Security Group have access to most MSS functionalities, including Application Setup, Ordering, Network Systems, Find Links, etc.

The behavior is similar to users in the Default Security Group.

EXPECTED BEHAVIOR

Users not assigned to any group should have no access to any MSS functionality.

STEPS

The issue can be reproduced with the following steps:

1. Create a Security User (by default it is placed in the DEFAULT Group)
2. Go to the Default Group and remove that user from the group
3. Login as user created in step (1)
4. User has access to most MSS functions not protected: Application Setup, Network Systems, Find Links ... etc.

BUSINESS IMPACT

This could pose a security problem if left unchanged.

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms