DOCUMENT_INQUIRY_DUTY Providing Excessive Access
(Doc ID 2727236.1)
Last updated on NOVEMBER 19, 2020
Applies to:Oracle Retail Invoice Matching Cloud Service - Version 19.0 and later
Information in this document applies to any platform.
User with just DOCUMENT_INQUIRY_DUTY (but not EDI_INQUIRY_DUTY) is able to view / navigate to EDI Document Search menu and view the data.
Steps to Recreate:
- Choose a user with just DOCUMENT_INQUIRY_DUTY (but not EDI_INQUIRY_DUTY).
- Login to ReIM application and notice that user is able to see EDI Document Search menu also.
- Navigate to EDI Document Search menu and try to search for the data. Notice that data is retrieved though user doesn't have access to query it.
To view full details, sign in with your My Oracle Support account.
Don't have a My Oracle Support account? Click to get started!
In this Document