How Function Security Works

Registering Functions

Excluding Functions

Each Oracle E-Business Suite product is delivered with one or more predefined menu hierarchies. System Administrators can assign a predefined menu hierarchy to a responsibility. To tailor a responsibility, System Administrators exclude functions or menus of functions from that responsibility using exclusion rules.

Note: The ability to exclude functions is to be used for backward compatibility only. Menu exclusions do not apply to grants.

Read-Only Forms for a Responsibility or User

An application developer can define a form to be opened in query-only, or read-only, mode by using the QUERY_ONLY=YES string as a parameter for the function calling the form. Beginning with Release 12.2.6, an administrator can create a grant to set a form as read-only on the responsibility level, user level, or for an organization or a group of users. This can be done by granting the 'EBS Read Only' permission set to grantees.

Using the Functional Administrator responsibility, navigate to the Grants > Create Grant page.

  1. On the Define Grant page, select the desired grantee type and grantee.

  2. On the Define Object Parameters and Select Set page, select the permission set 'EBS Read Only' and assign it to your grantee(s).

  3. Save your grant.

For more information on query-only forms, see Using Form Functions.

Available Functions for a User

Functions are available to a user through responsibilities (as well as grants).

When a user first selects or changes their responsibility, a list of functions obtained from the responsibility's menu structure is cached in memory.

Functions a System Administrator has excluded from the current responsibility are marked as unavailable.

Executable functions in the function hierarchy (such as the menu hierarchy) are displayed in the Navigate window. Available non-executable functions are accessed by working with the application's forms.

Related Topics