this happens in both - HCM 9.1 and FSCM 9.1
both on peopletools 8.52.10
In PeopleSoft we have rows of data secured by adding special prompt views. This technique is widely used in almost all PeopleSoft product lines.
I have recently come across one interesting issue with it. Let me try to explain it.
Scenario 1:
I have a component A, with static search record. One of the fields in Search record is Business unit which is secured using prompt table, which is in turn controlled by OPRID.
For example, if user U1 has access to business units B1, B2,B3, he would see all the Business units on the search screen. If user U2 has access to business units B1 alone, he would see only that Business units on the search screen and not B2/ B3. seems logical, right? good.
This works great if you are visiting the page online through browser (4 tier mode).
Good Peoplesoft Security post. Really usefull.
ReplyDelete