Business Error Security Uses Incorrect Security Setting
(Doc ID 2628675.1)
Last updated on JANUARY 14, 2020
Applies to:Oracle Insurance Policy Administration J2EE - Version 22.214.171.124 and later
Information in this document applies to any platform.
On : 126.96.36.199 version, General
Business Error security uses incorrect security setting. When a user has multiple security groups assigned to them and one group can override a business rule and another cannot the security for the Non-Overide setting will be used.
The user should be able to override a business error when any of their security groups has the permissions
The issue can be reproduced at will with the following steps:
1. Create two security groups. and give a user access to both.
2. Create a transaction with an attached rule ValidateExpressions. In this rule have an overridable error. Also have this error in AsErrorCatalog.
<Expression TYPE="ErrorOnTrue" OVERRIDABLE="Yes" ERRORNUMBER="W011" MESSAGE="This is an error.">1=1</Expression>
3. in the Palette set one of your created security groups to not be able to override this error.
4. Add the transaction one a policy and process it. The business error will not be overridable.
To view full details, sign in with your My Oracle Support account.
Don't have a My Oracle Support account? Click to get started!
In this Document