Internal Bank Accounts Are Updatable From Responsibilities From OU Which Has No Access (Doc ID 1615090.1)

Last updated on FEBRUARY 17, 2023

Applies to:

Symptoms

When having two payables responsibilities assigned to the same user and these
responsibilities have different security profile in MO: security profile,
when both responsibilities are assigned to the same user, it is possible to
query in one of the responsibilities the setup of bank accounts whose owner
is a legal entity the responsibility that is being used does not have access.
Also, that legal entity is available as a owner for entering bank accounts.

Besides the above, when adding a cash responsibility to the user, from that
cash responsibility it is possible to query the same bank accounts as the
payables responsibilities can.

Reproduction steps:
1. sysadmin  
Security / User / Define: Create a user
2. Assign to the user 2 payables responsibilities, lets say RS1 and RS2, that
access different operating units and legal entities.
3. Navigate to one of the payables responsibilities for example RS1, to
setup-payments-bank accounts. Check that it is possible to choose as a bank
account owner a legal entity the responsibility RS1 does not have access.
4. In sysadmin end date the responsibility RS2.
5. Navigate to the payables responsibility RS1 to setup-payments-bank
accounts. Check that now it is NOT possible to choose as a bank account owner
a legal entity the responsibility RS1 does not have access.

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.