ReSA Read Only/inquiry Duties Are Not Working As Expected (Doc ID 2510531.1)

Last updated on DECEMBER 03, 2019

Applies to:

Symptoms

Resa user that has following privileges assigned can access functionality that should not.

Privileges assigned:

• VIEW_TOTAL_DEFINITION_PRIV, SEARCH_TOTAL_DEFINITION_PRIV
• VIEW_EMPLOYEE_PRIV
• VIEW_APPLICATION_ADMINISTRATION_PRIV

Functionality that should not be able to access:

• View total definition privilege should not allow user to create new total definition.
• View privileges are allowing user to add new employee
• View privileges are allowing user to add edit system options.

The issue can be reproduced with the following steps:

1. Create a custom role for a resa user and assign the following duties/privileges:
   - RESA_TOTAL_DEFINITION_INQUIRY_DUTY (that includes : VIEW_TOTAL_DEFINITION_PRIV, SEARCH_TOTAL_DEFINITION_PRIV).
   - RESA_EMPLOYEE_INQUIRY_DUTY(that includes :VIEW_EMPLOYEE_PRIV) .
   - RESA_APPLICATION_ADMINISTRATION_INQUIRY_DUTY (that includes : VIEW_APPLICATION_ADMINISTRATION_PRIV).
2. Navigate to Foundation Data >> Manage total definition noticed that New action is available.
3. Navigate to Application administration >> Employees Add employee options is available.
4. Navigate to Application administration >>System options noticed that able to edit values from this screen.

Changes

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.