My Oracle Support Banner

Excel To CI Utility Not Having Row Level Security (Doc ID 2358161.1)

Last updated on FEBRUARY 15, 2018

Applies to:

PeopleSoft Enterprise HCM Human Resources - Version 9.2 to 9.2 [Release 9]
Information in this document applies to any platform.

Symptoms

ACTUAL BEHAVIOR
---------------
Self service roles widely assigned to all users of the system, e.g. Applicant, Employee and Manager who do not have access to other's Job data due to row level security.

Of particular concern is  access to CI_JOB_DATA that does not have row level security applied.Effectively this allows any user with one of the aforementioned roles to run Excel to CI into job data.
This is because of Web library WEBLIB_SOAPTOCI and Component interface through which the data are being uploaded

EXPECTED BEHAVIOR
-----------------------
Expect row level security to be enforced to the CI_JOB_DATA

STEPS
-----------------------
The issue can be reproduced at will with the following steps:

 Run excel to CI utility



Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Cause
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.