Security Profile on Element Entry API (Doc ID 372086.1)

Last updated on JANUARY 05, 2017

Applies to:

Oracle Payroll - Version 11.5.10.2 and later
Information in this document applies to any platform.
***Checked for relevance on 24-Dec-2010***


Goal

The user is calling hr_entry_api.get_link and pay_element_entry_api.create_element_entry from
a workflow process following approval from a notification.
The issue is that the person sending the notification may not be in the approver's security
profile. They can approve the claim but when they call the APIs, they return no data as they use
the secure view per_assignments_f not the base table to select data.

### Steps to Reproduce ###
Custom api call from workflow by person with security profile that excludes the person they are
trying to create an element entry for.

More updates from customer:
-----------------------------------------

All employees in an organization submit claims to a single person (Claim Approver).
As a manager the Claim Approver has subordinates but not all people in the organization are below
the Claim Approver in the Position Hierarchy.
The Security Profile attached to the Claim Approver only allows then to see the people below them
in the Position Hierarchy. This allows them to access their subordinates via a self-service
responsibility.
The issue is as the Claim Approver, they access their notifications from their self-service
responsibility. They approve the claim and it will error in the API due to the security profile
they have.
As the API has the assignment_id passed in, cannot see why a select in the API based on the
passed in id requires to apply the secure view. The item we are trying to create, an element
entry, is not restricted by security profiles.

The issue happens when the pay_element_entry_api.create_element_entry selects from
per_assignments_f using the assignment_id passed if the secure view does not return the assignment
record.

The user wants to know any possible options or workarounds to overcome this.

Solution

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms