User Is Able To Cancel Sales Orders Of Another Operating Unit Where They Do Not Have Access (Doc ID 3028515.1)

Last updated on JUNE 14, 2024

Applies to:

Symptoms

Transaction Entry

ACTUAL BEHAVIOR
User is able to cancel order of one Operating Unit(OU) from responsibility of another operating unit which they do not have access

EXPECTED BEHAVIOR
It is expected that user is able to view the sales order details which user has access and will not be able to do any operations on sales order which user don’t have access

STEPS

The issue can be reproduced at will with the following steps:

1) Create sales orders in responsibility related to France OU.
2) Create a folder for the query of the orders in France Responsibility.
3) Navigate to Belgium responsibility.
4) Open the order organizer and query for the folder query created in France.
5) Able to retrieve data but the operating unit field is coming as blank.
6) Open the sales order but data is not retrieved in sales order form.
7) Navigate to Actions in Order Organizer -> Click Cancel
8) User is able to cancel the orders even if Belgium OU doesn’t have access to France Orders.

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.