R12 Users Can Access And Modify Payment Process Requests From Other Operating Units (Doc ID 1156813.1)

Last updated on MARCH 08, 2017

Applies to:

Oracle Payables - Version: 12.0.1 to 12.1.3 - Release: 12.0 to 12.1
Information in this document applies to any platform.

Symptoms

Payments Manager Screen, user can access the Payment Instruction Link, even though the user does not have the access to the all the payments organizations.

EXPECTED BEHAVIOR
-----------------------
Expect user will be restricted and can not take action on the PPR containing the Invoices/Documents belong to Organizations for which user does not have access.

BUSINESS IMPACT
-----------------------
The issue has the following business impact:
Due to this issue, Payment Process is not secure anymore


Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms