My Oracle Support Banner

Clinical Subjects View Access Issue (Doc ID 2431424.1)

Last updated on AUGUST 03, 2018

Applies to:

Siebel CRM - Version 15.6 [IP2015] and later
Information in this document applies to any platform.

Symptoms

On : 15.6 [IP2015] version, Client Functionality

ACTUAL BEHAVIOR
---------------
When user navigates from Site Map --> Subjects he can see all subjects across application though not having access to Clinical Subjects View

EXPECTED BEHAVIOR
-----------------------
Access to All Subjects across application should be restricted

STEPS
-----------------------
The issue can be reproduced at will with the following steps:


1. Go to Sitemap -> Site Management -> Protocol Site List


2. Create a Protocol Site


3. Set Team Field as SADMIN (Primary)


4. Drilldown and create a subject name "Test Subject"


5. Login as different user other than SADMIN


6. Then go to Site Map - Subjects List


7. User can see "Test Subject"



BUSINESS IMPACT
-----------------------
The issue has the following business impact:

User who is not part of protocol site team is able to see and edit the subject record via Site Map - Subjects List when he logs in.

Changes

 

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.