Security using security profile option & task flow and nodes

we are going to change our access levels based on the various users created in the system. can some 1 out there provide me with a good document that can assist me in doing this exercise correctly and to the best practice
gurus appreciate if some one can help me as soon as possible!

You can refer these documents
Understanding and Using HRMS Security in Oracle HRMS [ID 394083.1]
Taskflows in Oracle HRMS [ID 73515.1]
But again these are generic document. you can share your question if you have any specific queries.
Thanks

Similar Messages

Which browser is better to use as an option to Safari and how do you download it?

Which browser is better to use as an option to Safari and how do you safely download it? Thanks

I use Firefox when a site doesn't work well with Safari. Some people like Google's Chrome, but I find it too instrusive and do not trust Google's security. You can download Firefox from firefox.com.
Regards.

What is difference between ADF Task Flow and Faces-Config - when delpoy ?

What is difference between ADF Task Flow and Faces-Config? When I create navigation between pages with ADF task flow then the navigation don't work when I deploy my application to Weblogic 10.3. When I use default server then navigation works fine. With Faces_config in both situations all works ok - on Stanalone server and default.
Where is the problem?
Best regards!

Shay, I don't use both faces-config and adf task flow! When I failed with task flow I tried faces-config.
I have active on my weblogic - adf.oracle.domain(1.0,11.1.1.0.0). This is the right ADF? If yes then where is the problem?
Best regards!

Order Import failing with error "The specified subinventory is invalid to use, the profile option INV: Allow Expense to Asset Transfer is set to No. Change the profile option to Yes or choose a valid subinventory."

Hi All,
I am getting this error while importing an internal sales order.
“The specified subinventory is invalid to use, the profile option INV: Allow Expense to Asset Transfer is set to No. Change the profile option to Yes or choose a valid subinventory.”
I have tried to set mentioned profile as ‘Yes’. But still getting same error.
Also, provided subinventory is present and active in given inventory organization.
Please share if anybody encountered this before and have a solution.

Hi 2878342
Please refer the following metalink note, it should resolve your problem.
Order Import Interface.Error Message Specified Subinventory Is Invalid To Use (Doc ID 406411.1)

Can not commit when using region in bounded task flow

Hi All
I am using Jdeveloper 11g R2 (11.1.2.3) & Weblogic 10.3.5.0
I have 2 bounded task flow in my application (A and B)
Each contain a fragment with few tabs (using af:panelTabbed)
I have another common functionality in this 2 bounded task flows
So I create another bounded task flow and add it as a region in tabs in task flows A and B
But when I am going to the common tab and insert record and commit using task flow commit it is not commit records in database
Is something wrong ? Any ideas how I can fix it?
Regards
Mohsen

Hi Frank
I am using below code for commit (from TaskFlowUtils class)
public void commitTaskFlow() {
getDataControlFrame().commit();
public DataControlFrame getDataControlFrame() {
BindingContext bindingContext = oracle.adf.controller.binding.BindingUtils.getBindingContext();
String dataControlFrameName = bindingContext.getCurrentDataControlFrame();
DataControlFrame dataControlFrame = bindingContext.findDataControlFrame(dataControlFrameName);
return dataControlFrame;
Your comment was too helpful , I change data control scope to shared and it is working now
One more related question:
Is adding bounded task flow into another fragment as region an advised approach?
Thanks a lot
Regards
Mohsen

Can ADF Faces Dialog Framework be used in a Bounded Task Flow ?

Jdev. 11.1.1.4
I have read chapter "19 Using Dialogs in Your Application" in the Jdev documentation.
There explains that there are mainly two methods to open dialogs in ADF:
The first (point 19.2) is calling a bounded task flow from a view activity (for example). This system can only open modal windows.
The other is using the ADF Faces Dialog Framework and it seems to be more general. In point "19.3.1 How to Define a JSF Navigation Rule for Opening a Dialog" it is explainied the way to achieve this but the explanation begins with "In the adfc-config.xml file, create a page flow for".
does this mean that I can not use this technology inside a Bounded task flow ?
I have tried and it seems that it doesn't work.
Currently we are using af:showpopupbehaviour to open popups, but this doesn't work with task flows and I don't like this.

does this mean that I can not use this technology inside a Bounded task flow ?ADF Faces Dialog Framework can be used in both unbounded and bounded taskflows.
I have tried and it seems that it doesn't work.The command commponent outcome must begin with "dialog:" and the command component tag must have useWindow="true", for example:
<tt><af:commandButton action="dialog:toEdit" useWindow="true" .../></tt>
Currently we are using af:showpopupbehaviour to open popups<af:showPopupBehaviour> can be used to open inline popups, but it has nothing to do with the Dialog Framework. Inline popups and the dialogs of the Dialog Framework are two different things.
Dimitar
Edited by: Dimitar Dimitrov on Jul 27, 2012 3:33 PM

Getting error in using URL View in Task Flow

Hi,
Using Jdeveloper: 11.1.1.3.0
What I am trying to achieve is that an ADF application can be bookmarked, and when it is open without a valid EBS login context, it should redirect it to the EBS login screen. In method initMainPage , I have code that determines if valid session exist or not. If not, then redirect to a login screen (which I trying to implement using URL View component).
I am using a Bounded Task Flow. and the flow within is as follows:
methodCall1 -> initMainPage (AM method) -> URL View
For URL View, URL property is set to: #{MainPageContainerBean.ebsLogoutURL} . ebsLogoutURL is a String in MainPageContainerBean, with getter and setter as below.
public String getebsLogoutURL() {
return ebsLogoutURL;
// return "/oracle/apps/flm/ekanban/common/ui/page/ParameterEntry.jsff";
public void setebsLogoutURL(String ebsLogoutURL) {
this.ebsLogoutURL = ebsLogoutURL;
This task flow is part of a JSPX page. When I run the JSPX page, it give me the following error.
<Feb 2, 2011 1:30:37 PM PST> <Error> <HTTP> <BEA-101020> <[ServletContext@4396218[app:ekanban module:ekanban-UI-context-root path:/ekanban-UI-context-root spec-version:2.5]] Servlet failed with Exception
java.lang.IllegalStateException: Attempt to validate an already invalid RegionSite:
at oracle.adf.view.rich.component.fragment.UIXRegion$RegionSiteImpl.validate(UIXRegion.java:978)
Please suggest a resolution or workaround to the issue.
Thanks,
Anoop

Now it is working. I didnt know that I needed to create getter and setter for the string that i refer to in the EL. Thanks for your help.

Cannot use icloud tab option on ipad and iphone as the open tabs are not listed.

cannot use icloud tab option on ipad and iphone as the open tabs are not listed.

just checked everything through and this is deffinately the public beta of iCloud as it simlily doesnt come up in the settings of ipad or iphone. However the current firmware i am using isnt an itunes download, as i have downgraded and all itunes synced apps onto both the iPad and iphone crash when i open them, is this because i have downloaded the firmware from a third party? i have treble checked that the firmware is NOT hacked and is just a host's official apple firmware, so i cannot understand why this problem is occuring?

Secure page unbounded task flow

i need to secure access to jspx pages in a unbounded task flow. what is the best way to achieve this using jdev 11.1.15 ?
as of now any user is able to access any jspx pages by typing a URL after logging in.
Edited by: 963798 on Dec 17, 2012 4:06 AM

You can't stop users from accessing pages defined in the unbounded taskflow as, by design, all pages in an unbounded taskflow are accessible from anywhere in you application. So all you can do is add the pages you want to secure to bounded taskflows, add resource grants to the taskflow (remove them for the actual pages/jspx), configure the taskflows so they cannot be invoked from a url and add the taskflows to the unbounded taskflow (just drag and drop them to the unbounded taskflow or change you view activity to a taskflow call). Hope this helps.

Security Profiles - Difference between SYSTEM and TENANT admin user?

Hi,
In the OnDemand Enterprise workbook, some defualt security profiles have been configured. This includes one called 'Tenant Admin'. When I look in the system there is also a profiule called 'System Admin'. Could somebody please explan the differences between system and tenant regarding these profiles? I assume we shoul drarely use System Admin, and Tenant Admin is the safer option?
Thanks
John

Hi,
As you mentioned there are 2 status can be maintained for documents like Equipment Master, Notification, Maintenance Order & other important business documents.
In case, client feels that system status is not enough to capture the details of the object, then user status can be used.
System statuses will be updated automatically based on business transactions which will be done on SAP.
For example, once the equipment is created, System status would CRTD (Created). If you install the same to some superior equipment or FL, then status would be INST (Installed).
If you keeping that equipment in Spare, then for that, you have to maintain separate User Status like AVLB (Available in Stock / Spare) so that through IH08, by using User status, you can the report which is available as spare.
These user status as per the name, should be updated by the user manually.
Regards,
Maheswaran.

Composite Application with a Task Flow and form created manually

Hi,
I'm using Oracle SOA Suite 11G and i'm trying to create a task form for a human task without using the auto generate wizards and i'm having trouble getting the form to show in BPM worklist.
I have followed instructions in the developers guide to create the form against the human task including the following
27 Designing Task Forms for Human Tasks
27.4.3 How To Create a Task Form Using the Complete Task with Payload Drop Handler
27.8 Deploying a Composite Application with a Task Flow
After i deploy and test, the task appears and works correctly in BPM worklist, but the form does not show. This is when i have the task form within a composite application or in a separate project. When i generate the form automatically using the wizards, this all works fine.
Updated: Noticed that when i create the task form manually and deploy it does not create entries as per instructions
20.3 Managing the URI of the Human Task Service Component Task Details Application
I have the details in hwtaskflow.xml, but for some reason, they are not automatically created... It is annoying to have this created each time...
Am i missing something? I don't see any errors in BPM worklist or on the server. Any advice would be appreciated.
Thanks
Edited by: user5535771 on Mar 12, 2010 5:01 PM

Hi Duncan,
Thanks for your reply.
The later option of not using Query_Only would involve massive custmizations, as there are so many forms apart from the absence forms.
There is just one taskflow that contains the person, assignment, Absence and SIT screen, how can we do like an standalone absence screen does not have tehe query only as Yes.
Please let me know in case you dint get me i will mention my development steps in points.
Many Thanks,
Vineet

ADF task-flow and transactions

Hi All,
I have created a web application using ADF and JDeveloper 11.1.1.4. The ADF web application has two pages 'Search' and 'Edit'. The 'Search' and 'Edit' are page fragments. I have two bounded task flows 'search-flow.xml and 'edit-flow.xml'. The search and edit functionality has been created as dynamic regions by dragging the task-flows onto the JSF page.
The bounded search-flow.xml has page flow from search ----> edit(Parent Action component)
The bounded edit-flow.xml has page flow as *-->edit----> search(Parent Action component)
User comes from login page to the search page. On search page users can choose to search for records and edit individual searched records or create a new record using 'CreateInsert' button. Either way users end up on the edit page.
On the edit page, users see a form to fill or modify. They have the choice to navigate back to search page using 'Search' button or commit changed record using 'Save' button or create new record using 'Create' button
The application is functioning 90% as expected, only problem is the transaction management part if the user does not care to save each time the edit is made.
Say for instance, on search page user press ' CreateInsert' button which takes the user to edit page and then without saving the new record user presses 'Search' button which takes the user to search page and so repeated goes back and forth cycle.
In such cases the transaction never ends, The primary key for each new record is retrieved from the DB sequence only on persisting to database. A place holder like negative integer is used for the primary key temporarily till new record is persisted to database.
As per best practices, I am using the checkUncommittedDatabehavior which prompts the user when navigation is done away from the edit page i.e. without saving on pressing the 'Search' button on edit page. User can choose 'OK' or 'Cancel' which comes bundled with the ADF checkUncommittedDatabehavior property. Even after selecting OK the new record does not seems to be rollbacked (Issue 1).
eg:, if the user performs the cycle(i.e navigating between search and edit pages without commit/save) 'n' times, new entity records are created with primary keys -1, -2, -3, -4 ........ so forth. As I said earlier a proper sequence number for the primary key is assigned only if a record is persisted to the database.
Now on the 'n+1' cycle the user fills the records and clicks commit, it comes up with a error 'primary keys with nulls from previous uncommitted record (i.e; 1,2,3, .....n) creation.
I guess the transaction management is not happening correctly and not completing during these cycles (1, 2...n) Note: I am not using 'Task Return' components in my bounded ADF task flows, just commit operation 'Save' button in edit page and checkUncommittedDatabehavior.
Also, in search-flow.xml I have following configured under 'Behavior' tab Transaction ---> No Controller transaction and ' Share data controls with calling task flow checked
in edit-flow.xml, these configurations are in place under 'Behavior' tab Transaction ---> Always begin new transaction and ' Share data controls with calling task flow checked and Critical checked and 'task flow rentry' as reentry-outcome dependant.
Thanks
Edited by: user5108636 on Oct 26, 2011 5:16 PM
Edited by: user5108636 on Oct 26, 2011 5:24 PM

Hi Frank,
I checked the DB sequence is setup correctly. I have also modified the problem description above for better understanding.
2. When users press OK, navigate to a commit method activity (just drag and drop the commit operation).
-- When user presses OK, I need to rollback instead of commit to make users lose the unsaved work and controller should navigate to the search page. Here, the message panel with Cancel and OK is shown automatically with the <af:checkUncommittedDataBehavior/> property, I thought the framework will do the rollback for me. If I need to do rollback manually, how to do it, because I cannot see the JSF related source code for the <af:checkUncommittedDataBehavior/> dialog box. Please suggest what to do
3. If they press cancel, have the return activity rolling back to the save point taken when the user entered the bounded task flow (edit task flow)
-- If they press cancel, user stays on the same page, so I will leave future action to the user. This bit is working fine in my app.
Thanks
Edited by: user5108636 on Oct 26, 2011 5:23 PM

11g TP2 ADF Task Flows and Transaction Management

I'm wondering how ADF Task Flow Transaction Management works vis-a-vis database sessions and using stored procedure calls in an environment with connection pooling. I haven't written the code yet but am looking for a better understanding of how it works before I try.
Example:
I create a bounded adf task flow. I set the "transaction" property to "new-transaction" and the "data control scope" to "isolated".
As the task flow is running, the user clicks buttons that navigate from page to page in the flow. Each button click posts the page back to the app server. On the app server a backing bean method in each page calls a stored procedure in a database package to modify some values in one or more tables in the database. The procedure does not commit these changes.
Each time a backing bean makes a stored procedure call will it be in the same database session? Or will connection pooling possibly return a different database connection and therefore a different database session?
If the transaction management feature of the adf task flows guarantees me that I will always be in the same database session then I don't have to write any extra code to make this work. Will it do that or not?

I don't know if it is documented in the adf documentation currently available for 11g TP2 but what you ask for is a normal transaction management with connection pooling and i can't imagine it is not implemented in ADF BC layer like it is in JPA or other persistence layer.
A transaction will always be executed in the same session. Normally your web session will stay in the same session even you start more than one transaction. You don't have to write any code to manage the session pooling. It is a good practices to customize it at the persistence layer during installation depending on your infrastructure.
Take a look into Fusion Developer Guide ... i'm sure you will find some better explanations about this.

Oracle 11i System Profile Option - Concurrent Define and Executable

I'm looking for what I think is a System Profile Option within Oracle Financials that will allow me to open Concurrent Program Define at the same time as Concurrent Program Executables so that I can copy and paste from one to the other. I can do this in our Dev. Environment but we recently refreshed the Test environment and I lost this ability.
I'm using the System Administrator responsibility within 11i and am referring to where you define your concurrent programs and executables.
I'm assuming this is a system profile option but I am unable to find it.
Our version is 11.5.10.2

Hello.
I think you have the Close Other Forms check box option checked. In the main menu, choose the Tools menu and see how is this checkbox status.If it is checked, just unchek it. You will be able to open both forms at same time.
Octavio

Setting initial focus amidst multiple templates, task flows, and fragments.

Hi Guys,
Using JDev 11.1.1.4.
I've got page fragments for which I'd like to set the initial focus. The issue is that oftentimes these .jsff pages are nested within page templates, train templates, dynamic regions, etc. As far as I know, the initial focus for a component is set on the document. The trick is finding out what all the prefixes are before the .jsff component.
pt1:dynamicRegion:3:pt1:t1:0:it1Is there any easy way to figure out all the prefixes before this :it1, which can oftentimes be dramatically different?
Would the easiest way be to set the initial focus to say "defaultFocus" and then have every .jsff have a component id called "defaultFocus"? Feels like cheating, but any other way I can think of seems way too complicated.
Thanks,
Will

The method we use is mainly programmed by: Marianne Horsch.
So again, 1 page:
<af:document ... initialFocusId="#{backingBeanScope.bolsysPageBean.initialFocus}">
<af:form .... defaultCommand="#{backingBeanScope.bolsysPageBean.defaultCommand}">Within the body of this page a dynamic region is defined, this is all that is ever refreshed.
Bean, not all logging etc removed:
private static final String DEFAULT_COMMAND_ATTRIBUTE = "defaultCommand";
private static final String INITIAL_FOCUS_ATTRIBUTE = "initialFocus";
private String defaultCommand;
private String initialFocus;
public BolsysPageBean() {
    super();
    initPage();
public final void initPage() {
    List<UIComponent> childrenList = getPageChildrenList();
    if (!childrenList.isEmpty()) {
      UIComponent defaultCommandComponent =
        UIComponentUtils.findComponentWithAttribute(childrenList, DEFAULT_COMMAND_ATTRIBUTE);
      if (defaultCommandComponent != null) {
        defaultCommand = defaultCommandComponent.getClientId(FacesContext.getCurrentInstance());
      UIComponent initialFocusComponent =
        UIComponentUtils.findComponentWithAttribute(childrenList, INITIAL_FOCUS_ATTRIBUTE);
      if (initialFocusComponent != null) {
        initialFocus = initialFocusComponent.getClientId(FacesContext.getCurrentInstance());
private List<UIComponent> getPageChildrenList() {
    UIViewRoot root = FacesContext.getCurrentInstance().getViewRoot();
    if (FacesContext.getCurrentInstance() != null && FacesContext.getCurrentInstance().getViewRoot() != null) {
      return UIComponentUtils.getAllChildComponents(root);
    return Collections.<UIComponent>emptyList();
public String getDefaultCommand() {
    return defaultCommand;
public String getInitialFocus() {
    return initialFocus;
}Util code:
public static List<UIComponent> getAllChildComponents(UIComponent root) {
    List<UIComponent> list = new ArrayList<UIComponent>();
    if (root.getFacetCount() > 0) {
      Map<String, UIComponent> facetMap = root.getFacets();
      for (Map.Entry<String, UIComponent> entry : facetMap.entrySet()) {
        UIComponent facetComponent = entry.getValue();
        list.add(facetComponent);
        if (facetComponent.getChildCount() > 0 || facetComponent.getFacetCount() > 0) {
          list.addAll(getAllChildComponents(facetComponent));
    list.addAll(getOwnChildren(root));
    return list;
private static List<UIComponent> getOwnChildren(UIComponent root) {
    List<UIComponent> list = new ArrayList<UIComponent>();
    if (root.getChildCount() > 0) {
      for (UIComponent child : root.getChildren()) {
        list.add(child);
        if (child.getChildCount() > 0 || child.getFacetCount() > 0) {
          list.addAll(getAllChildComponents(child));
    return list;
} The dynamic region is based on a backing bean as well.
As I said before, when you want it right use beans (:
-Anton

Security using security profile option & task flow and nodes

Similar Messages

Maybe you are looking for