Users Without Access Are Still Able to See the Documents (Doc ID 3029651.1)

Last updated on JUNE 18, 2024

Applies to:

Symptoms

ACTUAL BEHAVIOR
---------------
When having a Document Type Business Process (BP), where the Attachment line items tab is hidden from certain users (External Vendors), however by highlighting the record from the log they're able to access and download all the record attachment.

Normally in other types of BP they have the option to remove access to the attachment tab from BP Configuration.

EXPECTED BEHAVIOR
-----------------------
The users should be able to hide the Attachment line items tab from certain users.


STEPS
-----------------------
The issue can be reproduced at will with the following steps:

1. Log into the stage env
2. Open project
3. Navigate to the BP
4. Go to the Attachment line items tab, it should be hidden from certain users (External Vendors)
5. However by highlighting the record from the log they're able to access and download all the record attachment.

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.