AllowDelete Entity In PolicyActivity PlanPage Security Does Not Work As Expected.
Last updated on DECEMBER 04, 2017
Applies to:Oracle Insurance Policy Administration J2EE - Version 22.214.171.124 and later
Information in this document applies to any platform.
On : 126.96.36.199 version, Activity
As per the Palette Guide, AllowDelete controls whether the Delete checkbox will display on the Policy Activity screen. In V11, the checkboxes were deprecated and this may be the reason delete can still be selected as a filter when AllowDelete is unchecked in all PolicyActivity PlanPages. When the AllowDelete is unchecked for a particular security group those users should not be able to select the 'Delete' option from the 'Display' section on the Policy Activities page.
When the 'AllowDelete' item is unchecked on the PolicyActivity configuration under PlanPages for a specific security group users who are assigned to that group should not be allowed to select the 'Delete' option from the 'Display' box on the Policy Activities page within OIPA nor should they be allowed to delete any activities.
The issue can be reproduced at will with the following steps:
1) Configure or use an existing security group
2) For this security group navigate to the Policy Activity Page under Plan Pages
3) Uncheck the 'AllowDelete' Entity
4) Sign into OIPA using this security group
5) Navigate to a policy
6) Notice that you will still be able to select the 'Delete' option from the 'Display' field on the screen
The issue has the following business impact:
Due to this issue, User may delete spawned activities that should not be deleted without reversing the transaction that spawned them..
Sign In with your My Oracle Support account
Don't have a My Oracle Support account? Click to get started
My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms