Security Rules Are Not Applied When Querying The Requisition In Requisition Creation Form (Doc ID 2351758.1)

Last updated on FEBRUARY 22, 2021

Applies to:

Symptoms

Security Rules Are Not Applied When Querying The Requisition In Requisition Creation Form

ACTUAL BEHAVIOR

Able to open and view approved Requisition in 'Requisitions' form by other user who is not the document owner even the Security Level of the Requisition was set to "Private"

EXPECTED BEHAVIOR

User should not be able to open requisition of other user if Security Level is set to Prvate.

STEPS TO REPRODUCE

1. Create requisition using one user
2. Try to query the same from another user who is not the approver of the requisition.
3. Requisition should not be queried

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.