Maintain Privilege On Entity Set Is Not Given To Responsibility When MOAC (Multi-Org Access Control) is Enabled (Doc ID 1586873.1)

Last updated on JULY 19, 2017

Applies to:

Oracle Advanced Pricing - Version 12.1.3 and later
Information in this document applies to any platform.

Symptoms

On : 12.1.3 version, Pricing Object Security

ACTUAL BEHAVIOR
---------------
Find that responsibility = 990 QP Pricing Manager is not able to update
price list = 200 PAN which is a price list assigned within
Entity Set Name = 200 Price Lists.

EXPECTED BEHAVIOR
-----------------------
Since responsibility = 990 QP Pricing Manager
has maintain privilege assigned at responsibility level to Entity Set Name = 200 Price Lists,
one expects that this responsibility should be able to update price list = 200 PAN
which is a price list assigned within Entity Set Name = 200 Price Lists.

STEPS
-----------------------
The issue can be reproduced at will with the following steps:

1. Create entity set
  Entity Set Name = 200 Price Lists includes
  One member of this entity set is:
  Standard Price list name = 200 PAN which is Owned by ESA-200 Operating Unit (OU)

2. Assign privileges to Entity Set Name: 200 Price Lists

  Entity Set ID: 708, Entity Set Name = 200 Price Lists, Grantee Type: Responsibility,
  Grantee Name: 200 OM Entry User, Access Level = View Only, effective start date: 06-Aug-2010

  Entity Set ID: 708, Entity Set Name = 200 Price Lists, Grantee Type: Responsibility,
  Grantee Name: 990 QP Pricing Administrator, Access Level = View Only, effective start date: 12-Jul-2013

  Entity Set ID: 708, Entity Set Name = 200 Price Lists, Grantee Type: Responsibility,
  Grantee Name: 990 QP Pricing Manager, Access Level = Maintain, effective start date: 06-Aug-2010

  Entity Set ID: 708, Entity Set Name = 200 Price Lists, Grantee Type: Responsibility,
  Grantee Name: 200 QP Pricing Manager, Access Level = Maintain, effective start date: 06-Aug-2010

  Entity Set ID: 708, Entity Set Name = 200 Price Lists, Grantee Type: Responsibility,
  Grantee Name: 200 TeleSales Agent, Access Level = View Only, effective start date: 06-Aug-2010

3. Review profile option settings:

  MO: Default Operating Unit: FRG-990 (OU)
  MO: Operating Unit:  FRG-990 (OU)
  MO: Security Profile:  Unit  --(Site/Responsibility)
  HR: Business Group: Setup Business Group

4. Enable pricing security:
  Run Security Control Program under Oracle Pricing Administrator to enable QP security (Requirement on Release 12).

5. Review security profile settings:
  QP: Security Control ON Site
  QP: Security Default Maintain Privilege RESP Site
  QP: Security Default ViewOnly Privilege RESP Site

6. Attempt to update price list
  Responsibility = 990 QP Pricing Manager
  Navigate to: Price List > Price List Setup
  Query price list = 200 PAN
  Find that nothing is updatable on the price list. We can only view it.

BUSINESS IMPACT
-----------------------
The issue has the following business impact:
Due to this issue, users cannot setup necessary privileges to maintain all price lists by responsibility.

Changes

 This is a behavioral change from 11i to R12.

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms