EDU2636Y

Function Security
Overview
Copyright Oracle Corporation, 2005. All rights reserved.
Function Security "##ective $$%dd%yy
&age 1 o#
192110 1!.doc 'ev 1
Function Security
System References
Oracle Application Object Library > Users Oracle Application Object Library > Applications Oracle Application Object Library > ORACLE Users Oracle Application Object Library > Data Groups Oracle Application Object Library > Responsibilities Oracle Application Object Library > Menus
Distribution
Job Title*
Ownership
The Job Title list!"ourCo#pany$co#%&ubject'EDU((((() is responsible *or ensurin+ that this ,ocu#ent is necessary an, that it re*lects actual practice$
&age 2 o#
192110 1!.doc 'ev 1
Function Security
ILT Schedule:
Timing -./ #inutes 0/ #inutes 2-/ #inutes
Topic Lecture 1ractice Total
&age
o#
192110 1!.doc 'ev 1
O()ectives
Lesson Aim 3unction &ecurity restricts user access to in,i4i,ual #enus o* *unctions5 such as *or#s5 6TML pa+es5 or 7i,+ets 7ithin an application$ 3unction &ecurity allo7s you to ,e*ine a user an, assi+n the user one or #ore responsibilities5 7here each responsibility has a #enu associate, 7ith it$ 3unction &ecurity by itsel* restricts access to 4arious *unctions5 but it ,oes not restrict access to the ,ata a user can see or 7hat actions a user can per*or# on that ,ata$ This lesson ,iscusses ,e*inin+ users5 responsibilities5 an, #enus$ Instructor ote 8ote that 3unction &ecurity 9:tra,itional Oracle Applications &ecurity:; tas<s ha4e not chan+e, since pre4ious releases o* Oracle Applications 9--$=$> an, earlier;$ 6o7e4er5 7ith the intro,uction o* Oracle User Mana+e#ent in --$=$-/5 the ,e*initions o* so#e o* the concepts ha4e chan+e,$ ?n a,,ition5 so#e tas<s 7hich 7ere ,one only in the :tra,itional: 3unction &ecurity area can no7 be ,one in Oracle User Mana+e#ent5 e$+$ ,e*inin+ users$ &ince i#ple#entin+ Oracle User Mana+e#ent is optional 7ith --$=$-/5 the tra,itional Oracle Application &ecurity is still ,escribe, here$
&age * o#
192110 1!.doc 'ev 1
+anaging Application Security, Overvie-
!"n"ging Applic"tion Security: Overview ?n Oracle Applications5 the syste# a,#inistrator #ana+es security by creatin+ users an, assi+nin+ one or #ore responsibilities to the#$ Users then ha4e access to all the *unctionality associate, 7ith that responsibility$ Users A user is ,e*ine, as a hu#an bein+$ Althou+h the concept o* a user can be e(ten,e, to inclu,e #achines5 net7or<s5 or intelli+ent autono#ous a+ents5 the ,e*inition is li#ite, to a person in this ,ocu#ent$ "ou authori@e a user to si+n on to Oracle Applications by ,e*inin+ an application user$ "ou then assi+n one or #ore responsibilities to the ne7 user$ Responsibility A responsibility is a collection o* authori@ations that allo7 access toA . A speci*ic application or applications . A set o* boo<s . A restricte, list o* 7in,o7s5 *unctions5 an, reports Each user has one or #ore responsibilities5 an, se4eral users can share the sa#e responsibility$
&age 5 o#
192110 1!.doc 'ev 1
A syste# a,#inistrator can assi+n users any o* the stan,ar, responsibilities pro4i,e, 7ith Oracle Applications or create ne7 custo# responsibilities as nee,e,$ Self-Service Applications Security Oracle &el*B&er4ice Ceb Applications use colu#ns5 ro7s5 an, 4alues in ,atabase tables to ,e*ine 7hat in*or#ation users can access$ Table colu#ns represent DattributesE that can be assi+ne, to a responsibility$ These attributes are ,e*ine, in the Ceb Application Dictionary$ Instructor ote 8ote that Oracle User Mana+e#ent in --$=$-/ intro,uces the concept o* roles5 in 7hich a role is ,e*ine, as as :a job *unction 7ithin the conte(t o* an or+ani@ation 7ith so#e associate, se#antics re+ar,in+ the authority an, responsibility con*erre, on the user assi+ne, to the role$: Roles control the le4el o* access to the 4arious ,ata an, *unctions 7ithin an application5 instea, o* the tra,itional responsibility$ Responsibilities then only represent the set o* na4i+ation #enus containe, 7ithin an application$ There*ore5 responsibilities loosely represent an application itsel*5 or a subset o* the *unctions in an application$ Each responsibility ,e*ine, #ust be lin<e, to a #enu$
&age / o#
192110 1!.doc 'ev 1
Successive 0ayers o# Access Control in Oracle 1ser +anage$ent
L"yers of Access #ontrol with Or"cle $ser !"n"gement ?* you choose to i#ple#ent Oracle User Mana+e#ent5 you can a,, layers o* access control on top o* 7hat you ,esi+nate throu+h 3unction &ecurity$ Access control 7ith Oracle User Mana+e#ent is i#ple#ente, in successi4e layers an, each buil,s upon the one that prece,es it$ Or+ani@ations can optionally upta<e the 4arious layers ,epen,in+ on the ,e+ree o* auto#ation an, scalability that they 7ish to buil, upon the e(istin+ 3unction an, Data &ecurity #o,els$
&age ! o#
192110 1!.doc 'ev 1
2e#ining a 3e- Application 1ser
Defining " ew $ser 98; &ecurity > User > De*ine NoteA All 8a4i+ation paths5 unless other7ise note,5 are *ro# the &yste# A,#inistrator Responsibility$ De*ine an authori@e, user o* Oracle Applications by speci*yin+ a userna#e an, pass7or,$ Grant application pri4ile+es by assi+nin+ one or #ore responsibilities to the user$ 3or a co#plete e(planation o* the *iel,s on the Users 3or# seeA 96elp; Applie, Technolo+y > Oracle Applications &yste# A,#inistration > O4er4ie7 o* Oracle Applications &ecurity > Users Cin,o7 Refer to Practice - Users [LAB00001]
&age 4 o#
192110 1!.doc 'ev 1
1sing 'esponsi(ilities
#re"ting " ew Responsibility Generally you relate ne7 application users to e(istin+ pre,e*ine, responsibilities$ 6o7e4er5 you can custo#i@e an e(istin+ responsibility or create ne7 responsibilities to acco##o,ate the nee,s o* ,i**erent users or ,i**erent cate+ories o* users$ Chen creatin+ a ne7 responsibility5 it is +enerally easier to #o,i*y an e(istin+ responsibility in one o* t7o 7aysA . Extend Privileges That a Responsibility O ns Chen users reFuire a,,itional reportin+ an, su##ary in*or#ation5 you canA . Use reFuest +roups to a,, a,,itional pro+ra# or report pri4ile+es to a responsibility . Use #enus to a,, 7in,o7s an, tas<s to a responsibility . Restrict Privileges That a Responsibility O ns &o#eti#es it is easier to re#o4e authori@ations *ro# an e(istin+ responsibility$ To ,o this you canA . Use e(clusions a+ainst a responsibility to li#it #enu an, *unction access pri4ile+es to those reFuire, *or job ,uties . Use reFuest +roups to li#it pro+ra# or report pri4ile+es *or a responsibility that reFuires only ,ata entry pri4ile+es
&age 9 o#
192110 1!.doc 'ev 1
A*ter you ha4e ,e*ine, a ne7 responsibility5 you can associate it 7ith an application user$
&age 10 o#
192110 1!.doc 'ev 1
'esponsi(ility Co$ponents
#omponents of " Responsibility A responsibility has t7o reFuire, co#ponents an, t7o optional co#ponents$ Re!uired "o#ponents . Data +roupA A ,ata +roup speci*ies the Oracle Application ,atabase accounts to 7hich a responsibilityGs *or#s an, concurrent pro+ra#s connect$ . MenuA A #enu speci*ies the *or#s that a responsibility can ,isplay an, the *unctions it can access$ Optional "o#ponents . ReFuest security +roupA A reFuest +roup lists the concurrent pro+ra#s that a responsibility can run$ Chen a reFuest +roup is assi+ne, to a responsibility5 it is re*erre, to as a reFuest security +roup$ . E(clusionsA E(clusions #o,i*y a responsibilityGs access to the *or#s an, *unctions speci*ie, by a #enu$
&age 11 o#
192110 1!.doc 'ev 1
2e#ining a 3e- 'esponsi(ility
Defining " ew Responsibility . Asse#ble the co#ponents o* application pri4ile+es to create a responsibility$ . De*ine the responsibility by asse#blin+ a #enu5 report security +roup5 an, ,ata +roup an, ,e*inin+ any *unction security 9any #enu or *unction e(clusions;$
&age 12 o#
192110 1!.doc 'ev 1
'esponsi(ility Creation &rocess
Responsibility #re"tion %rocess There are *i4e *or#s in4ol4e, in the responsibility creation process$ These are a4ailable un,er the &yste# A,#inistrator responsibility$
&age 1 o#
192110 1!.doc 'ev 1
2e#ining a 3e- 'esponsi(ility
Defining " Responsibility 98; &ecurity > Responsibility > De*ine A responsibility ,eter#ines i* the user accesses Oracle Applications or Oracle &el*B&er4ice Ceb Applications5 7hich application *unctions a user can use5 7hich reports an, concurrent pro+ra#s the user can run5 an, 7hich ,ata those reports an, concurrent pro+ra#s can access$
&age 1* o#
192110 1!.doc 'ev 1
2ata 5roups
&h"t Is " D"t" 'roup( A ,ata +roup is a collection o* pairin+s o* an application 7ith an Oracle ?D$ Data +roups auto#atically support concurrent processin+ an, crossBapplication reportin+$ They +uarantee that an application connects to a uniFue application ,atabase account$ Note$ The installation process auto#atically ,e*ines ,ata +roups *or Oracle Applications5 so you only nee, to ,e*ine a,,itional ,ata +roups base, on your speci*ic reFuire#ents$ Application-Oracle %& Pairs . An application can be liste, only once in a ,ata +roup$ . An Oracle ?D can be paire, 7ith #ore than one application$ . A custo# application re+istere, 7ith Oracle Applications can be inclu,e, in a ,ata +roup$ &ata 'roups and Application Ob(ect )ibrary Application Object Library o7ns the ,atabase tables re*erre, to ,urin+ concurrent processin+ an, the stan,ar, sub#ission o* reports by any Oracle Application$ There*ore all applications nee, access to the Application Object Library tables$ Chen you are ,e*inin+ a ,ata +roup5 the application Application Object Library is auto#atically inclu,e,$ The Application Object LibraryGs Oracle ?D cannot be up,ate, or ,elete,$
&age 15 o#
192110 1!.doc 'ev 1
2e#ining a 2ata 5roup
Defining " D"t" 'roup 98; &ecurity > ORACLE > DataGroup Hy ,e*inin+ a ,ata +roup5 you can ,eter#ine 7hich Oracle account 9Oracle ?D; an applicationGs 7in,o7s5 reports5 or concurrent pro+ra#s connect to$ Use ,ata +roups to +rant application ,atabase account pri4ile+es to a responsibility an, the reFuests that it sub#its$ &ata 'roups Serve T o Purposes . ?,enti*y the Oracle ?D to 7hich *or#s connect 7hen users select the responsibility$ Choose one applicationBOracle ?D pair *ro# the ,ata +roup to associate 7ith your responsibilityGs 7in,o7s$ . Concurrent #ana+ers use a ,ata +roup to #atch the application that o7ns a report or concurrent pro+ra# 7ith a uniFue Oracle ?D$ A,,itionally5 you can incorporate custo# applications by +rantin+ application ,atabase access to custo# applications that you ,e4elop$ Alternati4ely5 use custo# applications to na#e custo#i@e, 4ersions o* concurrent pro+ra#s5 responsibilities5 an, concurrent #ana+ers to protect your custo#i@ations ,urin+ an up+ra,e$
&age 1/ o#
192110 1!.doc 'ev 1
'elating 2ata 5roups to For$s and &rogra$s
Rel"ting D"t" 'roups to Forms "nd %rogr"ms "ou can control the relationship a#on+ applications5 *or#s5 an, concurrent pro+ra#s by ,e*inin+ a ,ata +roup$ Applications* +or#s* and Progra#s . A 7in,o7 connects to the application ,atabase account ,esi+nate, by the responsibility associate, 7ith the application$ . A ,ata +roup ,eter#ines the pairin+ o* an application 7ith a uniFue application ,atabase account or Oracle ?D$ . A pro+ra# connects to the application ,atabase account associate, 7ith the application that o7ns the pro+ra#$ Application-Oracle %& Pairs . An Oracle ?D is a userna#e an, pass7or, that allo7s access to application tables in an Oracle ,atabase$ . A ,ata +roup lists the Oracle ?D assi+ne, to each Oracle application$ . A custo# application re+istere, 7ith Oracle Applications can be inclu,e, in a ,ata +roup an, paire, 7ith an Oracle ?D$
&age 1! o#
192110 1!.doc 'ev 1
Refer to Practice Data Groups [LAB00002] Refer to Practice Data Groups [LAB00003]
&age 14 o#
192110 1!.doc 'ev 1
2e#ining an Application
Defining "n Applic"tion 98; Application > Re+ister "ou can protect custo# *unctions5 *or#s5 reports5 an, pro+ra#s *ro# bein+ lost ,urin+ up+ra,es by re+isterin+ the#$ ?n the Applications 7in,o7 you 7ill supply the *ollo7in+ in*or#ationA . Application I Enter a userB*rien,ly na#e that 7ill appear in lists seen by the user$ . &hort 8a#e I Oracle Applications uses this short na#e to i,enti*y *or#s5 #enus5 concurrent pro+ra#s5 an, other co#ponents o* your application$ . Hasepath I Enter the base path 7here the *or#s5 reports5 an, pro+ra# *iles are locate,$ Ma<e sure that your base path is uniFue to pre4ent other applications *ro# 7ritin+ to the sa#e ,irectory$ 3or a co#plete e(planation o* the *iel,s in this *or# seeA 96elp; Applie, Technolo+y > Oracle Applications &yste# A,#inistration > Applications DHA > Applications Cin,o7
&age 19 o#
192110 1!.doc 'ev 1
'egistering an Oracle 62
Registering "n Or"cle ID 98; &ecurity > ORACLE > Re+ister . Only ,atabase a,#inistrators can create Oracle accounts$ . Only create a ne7 Oracle ?D *or a custo# e(tension to Oracle Applications$ . The install +roup ,esi+nates 7hich ,ata +roup the application is associate, 7ith$ 3or applications that span all ,ata +roups5 the install +roup is /$ ?nstall +roups nu#bere, - or +reater are associate, 7ith one speci*ic ,ata +roup$ "our ,atabase a,#inistrator can supply the correct install +roup nu#ber$
&age 20 o#
192110 1!.doc 'ev 1
+anaging Function Security
Function Security "ou can #ana+e security by controllin+ access to in,i4i,ual *unctions throu+h #enu ,e*initions$ About +unctions . A *unction is a set o* co,e in Oracle Applications that is e(ecute, only i* the na#e o* the *unction is present in a list #aintaine, 7ithin a responsibility$ . There are t7o types o* *unctionsA a *or# *unction an, a non*or# *unction or sub*unction$ A sub*unction represents a securable subset o* a *or#Gs *unctionality$ ,eb Regions The *iel,s in the Ceb re+ions are reFuire, only i* your *unction 7ill be accesse, *ro# Oracle &el*B&er4ice Ceb Applications$ Adding +unctions to or Re#oving +unctions fro# a Responsibility . Maintain #enu structures 7hile eli#inatin+ speci*ic *unctionality$ . E(clu,e in,i4i,ual *unctions *ro# a responsibility$ Adding or Re#oving -enus of +unctions . Use #enus to +roup *unctions to+ether$
&age 21 o#
192110 1!.doc 'ev 1
E(clu,e +roups o* *unctions by e(clu,in+ a #enu *ro# a responsibility$
&age 22 o#
192110 1!.doc 'ev 1
1sing the 3avigator
"vig"tor !enu Displ"ys The 8a4i+ator ,isplays only the #enu ite#s nee,e, *or na4i+ation$ Hecause you cannot choose sub*unctions *ro# a #enu5 they are not ,isplaye,$ &ub#enus consistin+ only o* sub*unctions are also not ,isplaye,$
&age 2 o#
192110 1!.doc 'ev 1
"7cluding Functions and +enus
)*clusion of Functions "nd !enus Use e(clusion rules to custo#i@e a responsibility$ "ou can e(clu,e *unctions at any le4el$ . Chen you e(clu,e a #enu ite# *ro# a responsibility5 all #enus an, *unctions that are neste, in that #enu are also e(clu,e,$ . Chen you e(clu,e a *unction *ro# a responsibility5 all occurrences o* that *unction throu+hout the #enu structure o* a responsibility are e(clu,e,$
&age 2* o#
192110 1!.doc 'ev 1
2e#ining a 3e- +enu Structure
ew !enu Structure Use the Menus *or# to ,e*ine #enus pointin+ to *unctions that you 7ant to #a<e a4ailable to a ne7 responsibility$ -a.e Ne Responsibilities* Not Ne -enus ?* possible5 apply e(clusion rules to e(istin+ #enus to custo#i@e a responsibility rather than constructin+ an entirely ne7 #enu structure$ &eter#ine the Application +unctionality Re!uired . Di**erent jobs reFuire access to ,i**erent *unction +roups$ . ?,enti*y pre,e*ine, #enus5 *or#s5 an, *or# sub*unctions to use as entries 7hen ,e*inin+ a ne7 #enu$ Plan /our -enu Structure . &tart 7ith a blan< Menus *or# 9blan< screen;$ Menus cannot be copie,$ A #enu sa4e, un,er a ,i**erent na#e o4er7rites the ori+inal #enu 9there is no &a4e As *eature;$ . &tart 7ith the lo7estBle4el #enus$ A #enu #ust be ,e*ine, be*ore it can be selecte, as an entry on another #enu$ . Assi+n #enus an, *unctions to hi+herBle4el #enus$
&age 25 o#
192110 1!.doc 'ev 1
. .
Assi+n the #enu structure to the ne7 responsibility by usin+ the responsibilities *or#$ Docu#ent your #enu structure by printin+ the 3unction &ecurity Menu Report$
&age 2/ o#
192110 1!.doc 'ev 1
6denti#ying "7isting +enu Structures
Designing " ew !enu Structure He*ore ,esi+nin+ a ne7 #enu structure5 i,enti*y any possible e(istin+ #enu structures that can be #o,i*ie, or #o,ele, *ro#5 an, ,ocu#ent custo# #enus by usin+ reports in the 3unction &ecurity Report &et$ +unction Security -enu Report . Lists the *ull #enu na#e o* the responsibility . ?n,icates any e(clu,e, #enu ite#s5 7ith the rules that e(clu,e the# +unction Security Navigator Report . Lists the #enu as it appears in the 8a4i+ator *or the responsibility speci*ie, . Does not inclu,e ite#s e(clu,e, by *unction security rules +unction Security +unction Report . Lists the *unctions accessible by the responsibility speci*ie, . Does not inclu,e ite#s e(clu,e, by *unction security rules
&age 2! o#
192110 1!.doc 'ev 1
+enu 5uidelines
&age 24 o#
192110 1!.doc 'ev 1
+odi#ying an "7isting +enu 2e#inition
!odifying " !enu "ou can #o,i*y pre,e*ine, #enus to suit speci*ic job *unctions$ Over rite a User -enu Na#e Chen you chan+e a #enuGs user #enu na#e5 the #enu entries are not a**ecte,$ The #enuGs ,e*inition still e(ists5 but un,er a ne7 na#e$ Other #enus that call the #enu by its ol, user #enu na#e no7 call the sa#e #enu by its ne7 9re4ise,; user #enu na#e$ The ol, user #enu na#e is no lon+er 4ali,$ Chen you are ,e*inin+ #enus5 or i* you are selectin+ #ain #enus 7hen ,e*inin+ a responsibility5 the pre4iously na#e, #enu is no lon+er ,isplaye, in any list o* 4alues$ -odify a -enu Entry Chen you are #o,i*yin+ a pre,e*ine, #enu5 all other #enus that call that #enu ,isplay the #enuGs #o,i*ications$ 3or e(a#ple5 i* you #o,i*y GLJ&U1ERU&ER0$/ by a,,in+ another pro#pt that calls a *or#5 all #enus that call GLJ&U1ERU&ER0$/ ,isplay the a,,itional pro#pt 7hen GLJ&U1ERU&ER0$/ is ,isplaye,$
&age 29 o#
192110 1!.doc 'ev 1
Creating a +enu
#re"ting " !enu Use the Menus 7in,o7 to create a #enuA 98; Application > Menu A*ter you sa4e your chan+es in this *or#5 the Co#pile &ecurity concurrent pro+ra# is auto#atically sub#itte, to co#pile the #enu ,ata$ Co#pilin+ your #enu ,ata allo7s *or the syste# to ,eter#ine #ore Fuic<ly ,urin+ a userGs session 7hether a *unction is a4ailable to a particular responsibility or #enu$ Ne -enus for# fields$ K -enu Type I use, to speci*y the purpose o* the #enu$ The possible 4alues areA B &tan,ar, I *or #enus that 7oul, be use, in the 8a4i+ator *or# B Tab I *or #enus use, in &el*B&er4ice applications B &ecurity I *or #enus that are use, to a++re+ate *unctions *or ,ata security or speci*ic *unction security purposes5 but 7oul, not be use, in the 8a4i+ator *or#$ K 'rant chec. box I chec<in+ this bo( in,icates that this *unction is auto#atically enable, *or the user$ 3or a co#plete e(planation o* the *iel,s on this *or# seeA
&age 0 o#
192110 1!.doc 'ev 1
96elp; Applie, Technolo+y > Oracle Applications &yste# A,#inistration > 3unction &ecurity > Menus Cin,o7 Note$ ?* a #enu entry has both a sub#enu an, a *unction ,e*ine, *or it5 then the beha4ior ,epen,s on 7hether or not the *unction is e(ecutable$ ?t it is e(ecutable5 then the sub#enu is treate, as content to be ren,ere, by the *unction$ The sub#enu 7ill not appear on the na4i+ation tree5 but 7ill be a4ailable in *unction security tests 938DJ3U8CT?O8$TE&T calls;$ ?* the *unction is not e(ecutable5 then it is treate, as a Dta+E *or en*orcin+ e(clusion rules5 an, the sub#enu is ,isplaye, on the na4i+ation tree$ A *unction is consi,ere, e(ecutable i* it can be e(ecute, ,irectly *ro# the current runnin+ user inter*ace$
&age 1 o#
192110 1!.doc 'ev 1
8he +enu 9ie-er
The !enu +iewer 98; Application > Menu > 9H; Lie7 Tree$$$
&age 2 o#
192110 1!.doc 'ev 1
1sing the +enu 9ie-er
$sing the !enu +iewer 98; Application > Menu > 9H; Lie7 Tree$$$ . To 4ie7 the #enu tree5 clic< on the plus 9M; si+n ne(t to the #enu na#e$ "ou 7ill see a hierarchical tree 7ith a nu#ber o* no,es$ Each no,e represents a *unction or sub#enu o* your #ain #enu$ . The #enu tree ,isplays the user #enu na#e *or the #ain #enu5 an, ,isplays the pro#pts *ro# the Menus *or# *or sub#enus an, *unctions$ ?* no pro#pt has been speci*ie,5 then no label 7ill appear *or the no,e$ Printing the -enu Tree To print a #enu tree5 choose 1rint *ro# the 3ile #enu$
&age
o#
192110 1!.doc 'ev 1
+enu 8ree 2isplay Styles
!enu Tree Displ"y Styles 98; Application > Menu 9H; Lie7 TreeN There are three styles *or 4ie7in+ your #enu tree$ "ou can select the style *ro# the Lie7 #enu or by clic<in+ the appropriate toolbar icon$ K Lertical I Menu entries are ,isplaye, 4ertically5 si#ilar to ho7 they appear in the 8a4i+ator 7in,o7 7hen you lo+ on to Oracle Applications$ K Or+BChart I Menu entries are ,isplaye, hori@ontally as in an or+ani@ational chart$ K ?nterlea4e, I Menu entries are ,isplaye, hori@ontally an, 4ertically$
&age * o#
192110 1!.doc 'ev 1
9ie-ing 3ode &roperties
Instructor ote: ?n the pre4ious sli,e o* the Menu Lie7er the properties can be seen on the ri+htBhan, pane *or the hi+hli+hte, DDe*ineE pro#pt$ Refer to Practice - Menus [LAB00004] Refer to Practice Query n!y "or#s [LAB0000$]
&age 5 o#
192110 1!.doc 'ev 1
Adding a Custo$ For$ Function
%rocedure for incorpor"ting " custom form function Use the *ollo7in+ proce,ure to incorporate a custo# *or# *unction$ -$ The application ,e4eloper 9usin+ the Application De4eloper responsibility; re+isters the *or# in the 3or#s 7in,o7$ 2$ The application ,e4eloper or syste# a,#inistrator creates a *unction that accesses the ne7 *or# in the 3or# 3unctions 7in,o7$ O$ The application ,e4eloper or syste# a,#inistrator a,,s the *or# *unction to a #enu in the Menus 7in,o7$
&age / o#
192110 1!.doc 'ev 1
Su$$ary
Lesson Summ"ry 3unction &ecurity pro4i,es you 7ith the ability to control Oracle Applications &ecurity$ The syste# a,#inistrator speci*ies 7hich users ha4e access to 7hich *unctions$ User si+nons pro4i,e the user access to an application$ Responsibilities control that userGs access to 4arious *unctions o* the application$ Online access is controlle, throu+h the use o* #enus an, #enu e(clusions$ Report an, concurrent pro+ra# access is controlle, throu+h the use o* reFuest +roups$
&age ! o#
192110 1!.doc 'ev 1

EDU2636Y

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

EDU2636Y

Uploaded by

Copyright:

Available Formats

Function Security

Copyright Oracle Corporation, 2005. All rights reserved.

Function Security "##ective $$%dd%yy

192110 1!.doc 'ev 1

Copyright Oracle Corporation, 2005. All rights reserved.

Function Security "##ective $$%dd%yy

192110 1!.doc 'ev 1

Timing -./ #inutes 0/ #inutes 2-/ #inutes

Topic Lecture 1ractice Total

Copyright Oracle Corporation, 2005. All rights reserved.

Function Security "##ective $$%dd%yy

192110 1!.doc 'ev 1

Copyright Oracle Corporation, 2005. All rights reserved.

Function Security "##ective $$%dd%yy

192110 1!.doc 'ev 1

+anaging Application Security, Overvie-

Function Security "##ective $$%dd%yy

192110 1!.doc 'ev 1

Copyright Oracle Corporation, 2005. All rights reserved.

Function Security "##ective $$%dd%yy

192110 1!.doc 'ev 1

Successive 0ayers o# Access Control in Oracle 1ser +anage$ent

Copyright Oracle Corporation, 2005. All rights reserved.

Function Security "##ective $$%dd%yy

192110 1!.doc 'ev 1

2e#ining a 3e- Application 1ser

Copyright Oracle Corporation, 2005. All rights reserved.

Function Security "##ective $$%dd%yy

192110 1!.doc 'ev 1

Function Security "##ective $$%dd%yy

192110 1!.doc 'ev 1

Copyright Oracle Corporation, 2005. All rights reserved.

Function Security "##ective $$%dd%yy

192110 1!.doc 'ev 1

Copyright Oracle Corporation, 2005. All rights reserved.

Function Security "##ective $$%dd%yy

192110 1!.doc 'ev 1

2e#ining a 3e- 'esponsi(ility

Copyright Oracle Corporation, 2005. All rights reserved.

Function Security "##ective $$%dd%yy

192110 1!.doc 'ev 1

'esponsi(ility Creation &rocess

Copyright Oracle Corporation, 2005. All rights reserved.

Function Security "##ective $$%dd%yy

192110 1!.doc 'ev 1

2e#ining a 3e- 'esponsi(ility

Copyright Oracle Corporation, 2005. All rights reserved.

Function Security "##ective $$%dd%yy

192110 1!.doc 'ev 1

Function Security "##ective $$%dd%yy

192110 1!.doc 'ev 1

2e#ining a 2ata 5roup

Copyright Oracle Corporation, 2005. All rights reserved.

Function Security "##ective $$%dd%yy

192110 1!.doc 'ev 1

'elating 2ata 5roups to For$s and &rogra$s

Function Security "##ective $$%dd%yy

192110 1!.doc 'ev 1

Copyright Oracle Corporation, 2005. All rights reserved.

Function Security "##ective $$%dd%yy

192110 1!.doc 'ev 1

Copyright Oracle Corporation, 2005. All rights reserved.

Function Security "##ective $$%dd%yy

192110 1!.doc 'ev 1

E(clu,e +roups o* unctions by e(clu,in+ a #enu ro# a responsibility$