Security Rules Are Not Applied When Querying The Requisition In Requisition Creation Form

(Doc ID 2351758.1)

Last updated on JANUARY 22, 2018

Applies to:

Oracle Purchasing - Version 12.2.4 and later
Information in this document applies to any platform.

Symptoms

Security Rules Are Not Applied When Querying The Requisition In Requisition Creation Form

ACTUAL BEHAVIOR

Able to open and view approved Requisition in 'Requisitions' form by other user who is not the document owner even the Security Level of the Requisition was set to "Private"

EXPECTED BEHAVIOR

User should not be able to open requisition of other user if Security Level is set to Prvate.

STEPS TO REPRODUCE

1. Create requisition using one user
2. Try to query the same from another user who is not the approver of the requisition.
3. Requisition should not be queried



Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms