My Oracle Support Banner

Import Allows Updating Attribute of Released Parts Even the User Does Not Have Modify Released Item Privilege (Doc ID 2587741.1)

Last updated on JANUARY 24, 2024

Applies to:

Oracle Agile Product Collaboration - Version 9.3.6.0 and later
Oracle Agile PLM Framework - Version 9.3.6.0 and later
Information in this document applies to any platform.

Symptoms

User who has modify preliminary item privilege, but without modify released item privilege can update the attribute of the released item via import

The issue can be reproduced at will with the following steps:

  1. Log into Java Client as admin user, and enable Page Two.Text01 field of Part class
  2. Create a user1 with below privileges:
    • Modify preliminary item with Page Two.Text01 in the Applied to
    • Import
    • Discover Item
    • Read Item
  3. Log into Web Client as admin user, and create Part P01, and release this item
  4. Prepare Import source file to update Page Two Text field of Part P01
  5. Log into Web Client as user1, search for P01 and make sure user cannot edit this part as it is released
  6. Run Import and do an item import with Business Rule: Authoring mode
  7. Result: Page Two Text field of Part P01 gets updated

Changes

 

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document
Symptoms
Changes
Cause
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.