Requisition Approval Page is not Using Row Level Security
(Doc ID 2600971.1)
Last updated on AUGUST 03, 2022
Applies to:
PeopleSoft Enterprise SCM Purchasing - Version 9.2 to 9.2 [Release 9]Information in this document applies to any platform.
Goal
Approver without the appropriate row level security can click on a worklist item and land on this page in edit mode, perform approval. The page should not allow the user to see/edit transaction information outside of their BU assignment as determined by their primary permission list assignment.
Steps to Reproduce the Issue:
1.Created two permission lists namely TEST_US001, TEST_US005
2.On User Profile page assigned TEST_US005 to VP1(Requester) as Primary permission list
3. On User Profile page ¿ assign TEST_US005 to VP2(Approver) as Primary permission list
2.On User Profile page assigned TEST_US005 to VP1(Requester) as Primary permission list
3. On User Profile page ¿ assign TEST_US005 to VP2(Approver) as Primary permission list
4.Navigate to Setup Financials/Supply chain > security > Unit by Permission list > Add US001 as accessible Business Units (BUs) for TEST_US001
5.Add US005 as accessible BUs for TEST_US005
5.Add US005 as accessible BUs for TEST_US005
6. Navigate to Setup Financials/Supply chain > security >Security Options >set it to Permission List Level Security, Check Business Unit check box
7. Apply Security setup
8. Run SEC_VIEWS process
8. Run SEC_VIEWS process
Transaction -
1.Log in as VP1 (Requester)
2.Create a Purchasing requisition and submit for approval
3.approval triggered to VP2
4.Log in as VP2
5.Go to Approvals > Requisition > Can access the transaction from Pending Approvals
6.Able to take action which is correct
7.Now on User Profile page, remove TEST_US005 and assign TEST_US001 to VP2(Approver) as Primary permission list
8.Go to Pending approvals
9.Still able to access the transaction for Business Unit US005
1.Log in as VP1 (Requester)
2.Create a Purchasing requisition and submit for approval
3.approval triggered to VP2
4.Log in as VP2
5.Go to Approvals > Requisition > Can access the transaction from Pending Approvals
6.Able to take action which is correct
7.Now on User Profile page, remove TEST_US005 and assign TEST_US001 to VP2(Approver) as Primary permission list
8.Go to Pending approvals
9.Still able to access the transaction for Business Unit US005
10.Able to approve the transaction ¿ Security setup not applied for Requisition Approvals
Solution
To view full details, sign in with your My Oracle Support account. |
|
Don't have a My Oracle Support account? Click to get started! |
In this Document
Goal |
Solution |
References |