Import Allows Updating Attribute of Released Parts Even the User Does Not Have Modify Released Item Privilege (Doc ID 2587741.1)

Last updated on SEPTEMBER 11, 2019

Applies to:

Symptoms

Actual Behavior

User who has modify preliminary item privilege, but without modify released item privilege can update the attribute of the released item via import

Expected Behavior

User who has modify preliminary item privilege, but without modify released item privilege to be restricted to update the attribute of the released item via import

Steps

1. Login to Java Client as admin user, and enable Page Two.Text01 field of Part class
2. Create a user1 with below privileges:
   • Modify preliminary item with Page Two.Text01 in the Applied to
   • Import
   • Discover Item
   • Read Item
3. Login to Web Client as admin user, and create Part P01, and release this item
4. Prepare Import source file to update Page Two Text field of Part P01
5. Login to Web Client as user1, search for P01 and make sure user cannot edit this part as it is released
6. Run Import and do an item import with Business Rule: Authoring mode
7. Result: Page Two Text field of Part P01 gets updated

Changes

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.