Customer Screening API User Authorization (Doc ID 2866167.1)

Last updated on JUNE 27, 2023

Applies to:

Goal

Way to restrict the sending of requests to the API either with a specific group or with a specific role

Steps to reproduce:
Step1: Configure a basic authorization for sending REST request (FCCM/rest-api/RTScreening/RTScreeningRestService/service/IndividualScreen)
Step2: Observe any authenticated user in FCCM can send requests and they are returned without problems (users without assigned groups)

Expected result: Any authenticated user in FCCM, should not send API request either with a specific group or with a specific role
Actual result: Any authenticated user in FCCM can send requests

Solution

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.