My Oracle Support Banner

Requisition Approval Page is not Using Row Level Security (Doc ID 2600971.1)

Last updated on JANUARY 04, 2021

Applies to:

PeopleSoft Enterprise SCM Purchasing - Version 9.2 to 9.2 [Release 9]
Information in this document applies to any platform.

Goal

Approver without the appropriate row level security can click on a worklist item and land on this page in edit mode, perform approval. The page should not allow the user to see/edit transaction information outside of their BU assignment as determined by their primary permission list assignment.

Steps to Reproduce the Issue:

1.Created two permission lists namely TEST_US001, TEST_US005
2.On User Profile page  assigned TEST_US005 to VP1(Requester) as Primary permission list
3. On User Profile page ¿ assign TEST_US005 to VP2(Approver) as Primary permission list
4.Navigate to Setup Financials/Supply chain > security > Unit by Permission list > Add US001 as accessible Business Units (BUs) for TEST_US001
5.Add US005 as accessible BUs for TEST_US005
6. Navigate to Setup Financials/Supply chain > security >Security Options >set it to Permission List Level Security, Check Business Unit check box
7. Apply Security setup 
8. Run SEC_VIEWS process
Transaction -
1.Log in as VP1 (Requester)
2.Create a Purchasing requisition and submit for approval
3.approval triggered to VP2
4.Log in as VP2
5.Go to Approvals > Requisition > Can access the transaction from Pending Approvals
6.Able to take action which is correct
7.Now on User Profile page, remove TEST_US005 and assign TEST_US001 to VP2(Approver) as Primary permission list
8.Go to Pending approvals
9.Still able to access the transaction for Business Unit US005
10.Able to approve the transaction ¿ Security setup not applied for Requisition Approvals


 

Solution

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Goal
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.