EEX 9.2: Copy From Existing Time Report Bypasses Project & Activity Team Enforcement At Activity ID Look-Up Feature (Doc ID 1936091.1)

Last updated on MARCH 16, 2016

Applies to:

PeopleSoft Enterprise FIN Expenses - Version 9.2 to 9.2 [Release 9]
Information in this document applies to any platform.

Symptoms

ISSUE:

While creating a brand new Time Report, by copying an existing old transaction, if the User clicks on the Activity ID look-up feature of one of the automatically created Lines, the displayed list of values for Activity ID do not correspond to those the Employee should be having access to in the Line. This happens when the below settings have been configured:

   - At the Project Costing Installation Options, the 'Enable Organization' setting has been selected
   - At the Project Costing Integration Installation Options, the 'Enable Status Control' setting has been selected
   - At the Project Costing Business Unit Definition level, the 'Project and Activity Team' setting has been selected, and the affected Product has been defined as Expenses

When creating a new Time Report from scratch, once the PC Business Unit and Project ID have been selected, the Activity ID look-up feature uses SQL Views PS_PC_BUGL_TEAM_VW and PS_PC_ACTEAM_TR_VW in order to identify which Project and Activities the Employee has been defined as a Team Member of, and displays the proper results. This seems to be bypassed when the new Time Report gets created from a 'Cy From Existing Time Report'. At this stage, should the Employee click on the Activity ID look-up feature, the system is using SQL View PS_PROJ_ACT_FVW which is the default one used by the system, returning basically all Active Project Activities, bypassing any Project and Activity Team enforcement. With this bug in the codeline, the Employee can select any of the Project Activities displayed, and successfully submit for approval the newly created transaction, which is incorrect.

The only way to work around this system security bypass would be for the Employee to delete the defaulted Time Report Line, and re-enter manually all the affected Fields: PC Business Unit, Project ID, and Activity ID. It is then when the secured Project and Activity Team enforced functionality works again.

REPLICATION STEPS:

   - Log into the FSCM Online Application as User ID VP1
   - Navigate to: Set Up Financials/Supply Chain > Install > Installation Options > Project Costing
   - Make sure that the option of 'Enable Organization' has been selected
   - Navigate to: Set Up Financials/Supply Chain > Install > Installation Options > Project Costing Integration
   - Make sure that the option of 'Enable Status Control' has been selected
   - Navigate to: Set Up Financials/Supply Chain > Business Unit Related > Project Costing > Project Costing Definition
   - For PC Business Unit US001, at the 'Project Costing Options' tab, make sure to select the below settings:
        - Project and Activity Team = Y
        - Product(s) = Expenses
        - Business Unit, Project, Activity = Required
        - Source Type = Required
        - Category = Required
        - SubCategory = Optional
   - Navigate to: Set Up Financials/Supply Chain > Product Related > Expenses > Management > Approval Setup > Transaction Definition
   - For the Time Report Transaction, make sure to activate the 'Project Approver' approval level
   - Navigate to: Project Costing > Project Definitions > General Information
   - Create a brand new Project ID with the following data:
        - PC Business Unit = US001
        - Project ID = GCS_PROJECT
        - Integration = US001
        - Project Status = Approved
        - Start Date = 01-01-2014
        - End Date = 31-12-2014
   - Navigate to: Project Costing > Activity Definitions > Project Activities
   - Add 3 new Project Activities for Project ID GCS_PROJECT just created, for the same Start and End Dates
   - Navigate to: Project Costing > Project Definitions > Team > Resources
   - Add Employee ID KU0006 (marked as Project Manager), and Employee ID KU0021 as Project Team Members, making sure to not copy anything to any of the Activities
   - Navigate to: Project Costing > Activity Definitions > Team > Resources
   - Select PC Business Unit US001, Project ID GCS_PROJECT, and Activity ID 000000000000002, and add Employee IDs KU0006 and KU0021 as Activity Resources
   - Log into the FSCM Online Application as User ID EXA1
   - Navigate to: Employee Self-Service > Travel and Expense Center > Time Report > Create/Modify
   - Define the Employee ID KU0021, and click on the ADD Button
   - Create a brand new Time Report with the below values:
        - Employee ID = KU0021
        - Period End Date = August 16th 2014
        - Country = USA
        - State = NY
        - Location = P0001
        - Billing Action = Billable
        - PC Business Unit = US001
        - Project ID = GCS_PROJECT
        - Activity ID = 000000000000002 (Should be the only one available for selection)
        - Monday through Friday = 8 Hours
        - Source Type = MATER
        - Category = HRDWR
        - SubCategory = MNTOR
   - Submit For Approval the newly created Time Report
   - Log into the FSCM Online Application as User ID MGR1
   - Navigate to: Manager Self-Service > Travel and Expense Center > Approvals > Approve Transactions
   - Locate the submitted Time Report, open it, and approve it
   - Log into the FSCM Online Application as User ID VP1
   - Navigate to: Travel and Expenses > Process Expenses > Expense Processing
   - Add a new Run Control ID with the following settings:
        - Run Control ID = GCS
        - Stage Time to Project Costing = Y
        - Business Unit = US001
   - Launch the EX_TRAN_PRCS AE Program to success
   - Log into the FSCM Online Application as User ID EXA1
   - Navigate to: Employee Self-Service > Travel and Expense Center > Time Report > Create/Modify
   - Define the Employee ID KU0021, enter a Period End Date of August 30th 2014, and click on the ADD Button
   - At this stage, click on the 'Copy From Existing Time Report' link
   - Select the Time Report ID previously created
   - Press on the CONTINUE Button
   - Note that the Time Report Line has been automatically pre-populated with the below listed values:
        - PC Business Unit = US001
        - Project ID = GCS_PROJECT
        - Activity ID = 000000000000002
   - Click on the Activity ID look-up icon
   - See how the system displays Activity IDs 000000000000001, 000000000000002, and 000000000000003 instead of only 000000000000002 as it should per the set up configured

To gather more information concerning this scenario and its related problem, refer to the available Replication Steps Word Document here linked containing the complete configuration and the replication steps necessary to reproduce the issue.

BUSINESS IMPACT:

The list of potential Activity ID values is incorrect, bypasses all the Project and Activity Team enforcement configuration that has been carefully set up, and confuses the Expenses Users. It even allows the Employee to select an incorrect Project Activity for which they have not been defined as a valid Resource, and successfully Safe For Later or even Submit For Approval the new transaction. Approvals does also not do any validations on that, and eventually the incorrect data can be passed into the FSCM Project Costing module, and subsequent integrations (Billing, and Accounts Receivable).

EXPECTED BEHAVIOR:

The Project and Activity Team enforcement secured functionality should work properly not only when creating a new Time Report from scratch, but also when copying it from an existing Time Report. At all times, the Activity ID look-up feature should be using the correct SQL Views depending on the configuration defined, taking into consideration the PC Business Unit and Project ID values in the affected Time Report Line. The Employee should only be able to see those Project Activities that are valid for his/her profile (Team enforced or not).
 

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms