Admin Maker/Checker User Can Modify Their Role To Gain Access To Auth Admin Role And Can Access To Transactions Specific To Auth Admin (Doc ID 2443031.1)

Last updated on JUNE 16, 2021

Applies to:

Symptoms

Admin can modify its own role. 

Steps to problem: 
1. Create admin user with Maker/Checker role. 
2. Login with the newly created admin user. 
3. The Admin maker/checker are able to modify themselves to Auth Admin role and can have access to transactions specific to Auth Admin role.

Expectation: 
Users created with role AdminMaker/Checker role should not have access to transactions specific to Auth Admin role. 

Changes

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.