Dispatcher Moved Activity From A Bucket They Should Not Have Access To
(Doc ID 2986969.1)
Last updated on NOVEMBER 23, 2023
Applies to:
Oracle Fusion Cloud Field Service - Version 23.B.05 and laterInformation in this document applies to any platform.
Symptoms
On : 23.B.05 version, Resources
ACTUAL BEHAVIOR
---------------
Dispatcher moved activity from a bucket they should not have access to.
EXPECTED BEHAVIOR
-----------------------
The dispatcher user, is not meant to have access to jobs in that bucket.
STEPS
-----------------------
The issue can be reproduced at will with the following steps:
1. Login to environment as resource with user type of a dispatcher
2. Navigate to Dispatch Console
3. Open bucket
4. Move activity to resource "
BUSINESS IMPACT
-----------------------
The issue has the following business impact:
Due to this issue, there are security and workflow concerns if dispatchers can access activities to which they are not authorized. There are financial penalties if jobs are incorrectly assigned without notification, of which bucket assignment and permissions is one control measure.
Cause
To view full details, sign in with your My Oracle Support account. |
|
Don't have a My Oracle Support account? Click to get started! |
In this Document
| Symptoms |
| Cause |
| Solution |
| References |