RMS_*_INQUIRY_DUTY Allows Write Access When the User Should Only be Allowed Read Access
(Doc ID 2884786.1)
Last updated on JULY 21, 2022
Applies to:
Oracle Retail Merchandising Foundation Cloud Service - Version 22.1 to 22.1 [Release 22.1]Information in this document applies to any platform.
Symptoms
RMS_SHIPMENT_AND_RECEIPT_INQUIRY_DUTY giving write access to Manage bill of lading in V22.1.203
Manage Bill of Lading has Create button access in Actions option for user defined as inquiry only.
EXPECTED BEHAVIOR
-----------------------
For the Shipment and Receipts Inquiry Duty it should not be possible to create and edit from the Bill of Lading Search screen.
STEPS
-----------------------
The issue can be reproduced at will with the following steps:
1. Create a role
2. Assign the duty - RMS_SHIPMENT_AND_RECEIPT_INQUIRY_DUTY
3. Create a user
4. Assign the role created
5. Login to application - v22.1.203.1
6. Go to Manage Bill of Lading
7. You will see Create access on the following screen under the Actions menu.
Note: The same behavior has been seen for other RMS_*_INQUIRY_DUTY roles in this version, see below list:
RMS_ITEM_INQUIRY_DUTY
RMS_ITEM_LOCATION_INQUIRY_DUTY
RMS_ITEM-SUPPLIER_INQUIRY_DUTY
RMS_PURCHASE_ORDER_INQUIRY_DUTY
Cause
To view full details, sign in with your My Oracle Support account. |
|
Don't have a My Oracle Support account? Click to get started! |
In this Document
| Symptoms |
| Cause |
| Solution |
| References |