Maintain Privilege On Entity Set Is Not Given To Responsibility When MOAC (Multi-Org Access Control) is Enabled (Doc ID 1586873.1)

Last updated on NOVEMBER 13, 2019

Applies to:

Symptoms

On : 12.1.3 version, Pricing Object Security

ACTUAL BEHAVIOR
---------------
Find that responsibility = XX QP Pricing Manager is not able to update
price list = 200 PAN which is a price list assigned within
Entity Set Name = 200 Price Lists.

EXPECTED BEHAVIOR
-----------------------
Since responsibility = XX QP Pricing Manager
has maintain privilege assigned at responsibility level to Entity Set Name = 200 Price Lists,
one expects that this responsibility should be able to update price list = 200 PAN
which is a price list assigned within Entity Set Name = 200 Price Lists.

STEPS
-----------------------
The issue can be reproduced at will with the following steps:

1. Create entity set
  Entity Set Name = 200 Price Lists includes
  One member of this entity set is:
  Standard Price list name = 200 PAN which is Owned by YY Operating Unit (OU)

2. Assign privileges to Entity Set Name: 200 Price Lists

  Entity Set ID: 708, Entity Set Name = 200 Price Lists, Grantee Type: Responsibility,
  Grantee Name: XX OM Entry User, Access Level = View Only, effective start date: 06-Aug-2010

  Entity Set ID: 708, Entity Set Name = 200 Price Lists, Grantee Type: Responsibility,
  Grantee Name: XX QP Pricing Administrator, Access Level = View Only, effective start date: 12-Jul-2013

  Entity Set ID: 708, Entity Set Name = 200 Price Lists, Grantee Type: Responsibility,
  Grantee Name: XX QP Pricing Manager, Access Level = Maintain, effective start date: 06-Aug-2010

  Entity Set ID: 708, Entity Set Name = 200 Price Lists, Grantee Type: Responsibility,
  Grantee Name: XX QP Pricing Manager, Access Level = Maintain, effective start date: 06-Aug-2010

  Entity Set ID: 708, Entity Set Name = 200 Price Lists, Grantee Type: Responsibility,
  Grantee Name: XX TeleSales Agent, Access Level = View Only, effective start date: 06-Aug-2010

3. Review profile option settings:

  MO: Default Operating Unit: ZZ (OU)
  MO: Operating Unit:  ZZ (OU)
  MO: Security Profile:  Unit  --(Site/Responsibility)
  HR: Business Group: Setup Business Group

4. Enable pricing security:
  Run Security Control Program under Oracle Pricing Administrator to enable QP security (Requirement on Release 12).

5. Review security profile settings:
  QP: Security Control ON Site
  QP: Security Default Maintain Privilege RESP Site
  QP: Security Default ViewOnly Privilege RESP Site

6. Attempt to update price list
  Responsibility = XX QP Pricing Manager
  Navigate to: Price List > Price List Setup
  Query price list = 200 PAN
  Find that nothing is updatable on the price list. We can only view it.

BUSINESS IMPACT
-----------------------
The issue has the following business impact:
Due to this issue, users cannot setup necessary privileges to maintain all price lists by responsibility.

Changes

 This is a behavioral change from 11i to R12.

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.