WebAdi (Excel Import) Is Not Honoring Item Security When Changing The Item Catalog Category (ICC) (Doc ID 2007427.1)

Last updated on MARCH 08, 2017

Applies to:

Oracle Product Hub - Version 12.1.3 and later
Information in this document applies to any platform.

Symptoms

On : 12.1.3 version, Security.

Actual Behavior

The goal is to prevent users from changing the 'Item Catalog Category' (ICC). Find that the user is still able to change the ICC using excel import.


Expected Behavior

Expect Excel Import to honor the same security as maintaining items directly in the application.

Steps

1. There are menu exclusions to remove 'Change Item Catalog Category', from the Actions drop down list of values, on the item page. This is to prevent users from making a change to the ICC on the item page.

2. The privilege 'Edit Item Catalog Assignments' is disabled on the item role.

3. Users are still able to upload changes to item attributes, using excel import, including a change to the ICC. If user makes a change to the ICC, the application is allowing this change,
 which does not honor the setup which prevents this from happening in the item page.



Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms