EAR9.1: Users Can See List of Conversations in Collections Workbench for Unauthorized Business Units When Security is Enabled (Doc ID 2039135.1)

Last updated on SEPTEMBER 16, 2016

Applies to:

PeopleSoft Enterprise FIN Receivables - Version 9.1 to 9.1 [Release 9]
Information in this document applies to any platform.

Symptoms

Statement of the issue:
----------------------------------
A user can see list of conversations for Business Units in Collections Workbench even if permission list assigned to the user does not have the access to those business units. But the user can not open the conversation.

Expected Behavior:
----------------------------
User should not see list of conversation for Business Units in Collections Workbench if permission list assigned to user does not have the access to those business units.

Steps to Replicate:
------------------------------

  1. Enter an item for business unit US001 and add conversation to the item.
  2. Make sure you do not have access US001 to the permission list assigned by going to Set Up Financials/Supply Chain > Security > Unit by Permission List.
  3. Make sure the Security option has Permission list, business list and setid selected.
  4. Run Apply Security Setups by going to Set Up Financials/Supply Chain > Security > Apply Security Setups.
  5. Go to Collections Workbench and search in for the customer you entered for the item on the step 1 without adding business unit.
  6. Conversation tab of the Collections Workbench will show the conversation added in the step 1 in the list even if you do not have access to this business unit.
  7. Click on the conversation link and the conversation can not be opened.

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms