User can Access Supplier Change Request Transactions of Other Users on Change Request Page
(Doc ID 2971001.1)
Last updated on AUGUST 29, 2023
Applies to:
PeopleSoft Enterprise SCM Purchasing - Version 9.2 and laterInformation in this document applies to any platform.
Symptoms
User can access Supplier Change Request transactions of other users on Change Request Page.
Note: In the Replication Steps, User Details / Company Names / Addresses / Emails / Telephone Numbers / Etc. are fictitious (based upon made-up data used in the Oracle DEMO Environments), any similarity to actual persons, living or dead, is purely coincidental and not intended in any manner.
The issue can be reproduced at will with the following steps:
1, Login VP1
Navigate : Suppliers > Supplier Change Request > Init Supplier Change
VP1 has an access to view Request Additional Information for SHARE-USA0000001
2. Login BLOCHERTY
Navigate : Suppliers > Supplier Change Request > Init Supplier Change Search SHARE- USA0000001
No records found
3. Add these Parameters to the URL in the browser
?Page=SCR_VNDR_SELECT&Action=U&SCR_ID=000000000000001
Issue : The user can access the data but the user does not have privileges for that Supplier.
Changes
Cause
To view full details, sign in with your My Oracle Support account. |
|
Don't have a My Oracle Support account? Click to get started! |
In this Document
| Symptoms |
| Changes |
| Cause |
| Solution |
| References |