Import Validate Button Create Object With No Create and Delete Privilege Set (Doc ID 2483764.1)

Last updated on AUGUST 20, 2021

Applies to:

Goal

ACTUAL BEHAVIOR
User does not have Create and Delete Privilege for certain object but can create new object when pressing the Validate button.

The object gets created right after pressing Validate button.

The behavior differs when user press Import button, as it will end in Insufficient privilege error


STEPS
1) In Java Client create a new critiera

Name : testAssembly
Object Type : Assembly

2) Create the following privilege

a) Modify

Name : testModifyAssembly
Criterria : testAssembly

b) Create

Name : testCreateAssembly
Criterria : testAssembly

c) Read

Name : testReadAssembly
Criterria : testAssembly

d) Discovery

Name : testDiscoveryAssembly
Criterria : testAssembly

e) Import

Name : testImport
Criterria : testAssembly

3) On below role and add privilege

Name : testRole

- testCreateAssembly
- testModifyAssembly
- testReadAssembly
- testDiscoveryAssembly
- testImport

4) Create a new user : user1

5) add testRole to this new user : user1

6) Create a import source file : testimpsource.xlsx

Number Part Type
TEST01 Assembly

7) Login to user1 user in Web Client

8) Press Validate
  for source file : testimpsource.xlsx

Messages

Validate will try to create all non-existing objects then delete after
validation is done. Failure in deleting these created objects because user
does not have the needed delete object privilege(s).
 
The 'Assembly' object 'TEST01' doesn't exist in system, would you like to
create or reject it?
Accept : check

9) Search TEST01

==> TEST01 is created

10) Remove privilege testCreateAssembly from testRole

11) Modify import source file : testimpsource.xlsx

Number Part Type
TEST02 Assembly

12) Login to Web Client as user1

13) Press Validate for
   source file : testimpsource.xlsx

Messages

Validate will try to create all non-existing objects then delete after
validation is done. Failure in deleting these created objects because user
does not have the needed delete object privilege(s).
 
The 'Assembly' object 'TEST02' doesn't exist in system, would you like to
create or reject it?
Accept : check

14) Search TEST02

==> TEST02 is created

15) Create the following privilege

f) Delete

Name : testDeleteAssembly
Criterria : testAssembly

16) On Name : testRole add testDeleteAssembly

- testDeleteAssembly
- testModifyAssembly
- testReadAssembly
- testDiscoveryAssembly
- testImport

17) Login to Web Client as user1

18) Modify import source file : testimpsource.xlsx

Number Part Type
TEST03 Assembly

19) Press Validate for
   source file : testimpsource.xlsx

Messages
 
Accept The 'Assembly' object 'TEST03' doesn't exist in system, would you
like to create or reject it?
Accept : check

20) Search TEST03

==> TEST03 does not appear

21) Return back to the import page

Accept The 'Assembly' object 'TEST03' doesn't exist in system, would you
like to create or reject it?
Accept : check

==> Press Import button

Messages :

Insufficient privilege
 

Solution

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.