Access Control functionality in Oracle workflow

Hi everyone,
I am doing research into access control models and workflow systems (separation of duty policies in particular). As far as I could tell, Oracle Workflow does not provide much in terms of securing access to data in a workflow process (except from the normal login authentication of course).
One usually assigns a task's performer to a CONSTANT role from your database roles so that only certain users will have access to that task. This is not always enough though, especially when the role-hierarchy is not properly contructed and maintained. So, I've been working on a few scripts to dynamically prevent users from receiving tasks on their worklists based on their previous participation in the process (e.g. to prevent a manager from approving his own leave application).
I was just wondering if anyone else have been working on access control in Oracle Workflow. Is there any built-in functionality that I missed that controls task-user assignment?
Thanks,
Carmen

Thank you very much Sirish for your help.
We are facing huge performance issues while Risk Analysis with Oracle Application servers through Greenlight Adaptor - its taking around 10 hours for 3000 users. Can you please point out what can be the possibilities and how can we trace out exact root cause and then solve it.
This is happening on GRC AC 5.2 SP10 and GRC logs doesn't say much , it just gives output taken 12 secs for one user Risk Analysis.
Here is our understanding on how GRC does Risk Analysis and our observations on our systems -->
1. GRC asks for 1 user details at a time from Oracle Application Server - please confirm does GRC do Risk Analysis for one user at a time or a bunch of users?
2. Oralce App server get details of that user and sends back results to GRC.
3. Now there is a wait time for around 3 secs before Oracle Server gets request for the second user. 3 sec for one user means 2.5 hours of wait time for 3000 users. We are not able to understand why Oracle Server needs to wait for next user request from GRC?
Would highly appreciate if you can share your experience on GRC Risk Analysis with Oracle (Greenlight Adaptor) and with SAP systems.
Best Regards
Davinderpal Singh

Similar Messages

Access Control - Function - error

Hi guys,
I was following "" Application Express Advanced Tutorials How to build an Access Control page ""
But the function in the tutorial would not work:
http://download.oracle.com/docs/cd/E14373_01/appdev.32/e13363/acl.htm#CHDDDFBD
CREATE OR REPLACE FUNCTION acl_custom_auth (
p_username IN VARCHAR2,
p_password IN VARCHAR2)
RETURN BOOLEAN IS
BEGIN
FOR c1 IN (SELECT 1
FROM acl_employees
WHERE upper(userid) = upper(p_username)
AND upper(last_name) = upper(p_password))
LOOP
RETURN TRUE;
END LOOP;
RETURN FALSE;
END;
Could you please tell where is the mistake??
What is " c1 " in the function??
Thanks In Advance,
Fateh

Thanks Alex,
Having done what you advised, I got the following error:
1 error has occurred
ORA-06550: line 2, column 1: PLS-00103: Encountered the symbol "CREATE" when expecting one of the following: ( begin case declare end exception exit
for goto if loop mod null pragma raise return select update while with <an identifier> <a double-quoted delimited-identifier> <a bind variable> << continue
close current delete fetch lock insert open rollback savepoint set sql execute commit forall merge pipe purgePerhaps you can take a look at the App,
workspace: somefeto
username: [email protected]
password: QQWWEE!1
App: 40807. ACL_EMPLOYEES
App credentials :
dev
dev
Best Regards,

Usage of WAIT function in Oracle Workflow

Hi all,
I am new to Oracle Workflow, I interested to learn about WAIT function, So I gone through the docs provided by Oracle. But I am not able to figure it out. Can any one explain me abuot WAIT function in 2 or 3 lines.
Regards
Prakash

check these -
Wait Activity (Oracle Workflow Developer's Guide)
Oracle Workflow Developer's Guide
Workflow Wait Function

Access SQL Function in Oracle?

Microsoft Access SQL has a function called LastOf which extracts
data from a column within the last row returned when multiple
rows are returned. This function works even when many tables are
joined and only one of them returns multiple rows. Does Oracle's
SQL implementation have anything like it?

I can't find a reference to a LastOf function for MS-Access.
Perhaps you are refering to the Last(expr) function or MoveLast
method of DAO Recordset.
Last behavior can be reached in one of several ways depending on
the desired results, most depending on the ordering of the result
set. Both Access and VB use the concept of a recordset, which is
analogous to a CURSOR in Oracle.
To use an implicit cursor, and only retreive the one row, you
might use the sudo-colomn ROWNUM:
SELECT my_col FROM my_tab WHERE ROWNUM = 1
This would give you the first record of the result set, but there
is no guarantee on which row it would be - so you might consider
ordering the result set:
SELECT my_col FROM my_tab WHERE ROWNUM = 1 ORDER BY my_col ASC;
Which would return one row, the value of my_col being the
smallest value in the table. Now might be a good time to talk
aggrogate functions, such as:
SELECT MIN( my_col ) FROM my_tab;
which does the same thing as above.
If all else fails, RTFM.
-Kevin

Access control in workflow tasks

I want to filter which users should have access to a certain workflow task. If looking in the help file there should be some way to filter the users which should be granted access. But this functionality seems to be switched off. Can anybody tell me why and if there is another way to filter the users?
In the "behalf of" section the filter option is still available...
Kind regards
Jörn Kaplan

Hi Jörn,
please check your Identity Store configuration on the tab "Workflow" if "use simplified access control" is disabled (By default this is enabled)
Once this is disabled you should get in the access control settings of your workflow task also the option "Allow access for: " - "Filter"
Best regards,
Oliver

Access control in workflow

Do we need to change any access control information in the workflow builder while making a copy of the existing seeded oracle workflow?
Thanks
KK

Possibly :)
To copy a process from one item type to another, then your access level only needs to match that of the target item type. If you are copying within the same item type, then you may need to change your access level so that you can paste the new version into the item type.
Either way, once you have copied the process, then you will probably need to change your access level so that you can modify the process.
HTH,
Matt
Edited by: rukbat on Jul 4, 2011 1:26 PM

Oracle Workflow

Hello,
We are planning to build workflow capability to our product. This product is written in C++ and uses Oracle 8i enterprise edition as database. One of the option is to use oracles existing workflow engine as the base and build over that. I had the following queries on the oracle workflow.
1. Is oracle workflow a part of Oracle 8i enterprise edition. If so is there any additional license to be obtained to use this product?
2. What are the components of Oracle workflow engine? What additional products of Oracle has to be purchased for full functioning of Oracle workflow?
3. Any information on functioning of workflow engine. ie. What happens after a Workflow process definition has been imported and this process is initiated.
4. Is oracle workflow complaint to Wfmc standards.
5. How powerfull is Oracle workflow when it comes to integration with external systems.
It would be great if any body could help me any of the above questions in part or full or even send some other comments that they feel would be usefull.
Thanks and regards
Rajesh
null

I can answer some of your queries, as i have worked on Oracle Workflow in globally deployed applications in the financial services industry.
1. oracle workflow is part of 8i enterprice edition
2. workflow consists of the workflow server (set of plsql procedures) and workflow builder (tool used to build your workflow's). Though if you want to include other than HTML documents(say Word, Excel...) as attachments to your notifications you can consider iFS. You can also consider using 9iAS if you want to do a bespoke customization using the Java API.
3. The scope of this question is huge. I would suggest you take a look at the Workflow Guide. Referring to the specific query raised by you, once the process is initiated the workflow engine will push it through the various activities in your workflow with the objective of running the current instance to completion.
4. I remember reading that Oracle Workflow is WfMC, though I am not able to locate the link.
5. The projects I have worked on.. Oracle Workflow intefaces with Sybase, Informix, DB2, IBM MQ Series, TIBCO Rendezvous, Weblogic JMS... Oracle Workflow provides external java function which can be used to interact with external applications. Oracle 8i database also supports JMS 1.2 standards based API. You can also use that to interact with queueing systems.
Hope you find it useful.
Thanks
Satish Paul
Hello,
We are planning to build workflow capability to our product. This product is written in C++ and uses Oracle 8i enterprise edition as database. One of the option is to use oracles existing workflow engine as the base and build over that. I had the following queries on the oracle workflow.
1. Is oracle workflow a part of Oracle 8i enterprise edition. If so is there any additional license to be obtained to use this product?
2. What are the components of Oracle workflow engine? What additional products of Oracle has to be purchased for full functioning of Oracle workflow?
3. Any information on functioning of workflow engine. ie. What happens after a Workflow process definition has been imported and this process is initiated.
4. Is oracle workflow complaint to Wfmc standards.
5. How powerfull is Oracle workflow when it comes to integration with external systems.
It would be great if any body could help me any of the above questions in part or full or even send some other comments that they feel would be usefull.
Thanks and regards
Rajesh
null

What is the Oracle equivalent of the Microsoft Access FIRST function?

Using: Oracle 10gR2 RAC on SUSE Linux 9 (10.2.0.3)
In the process of converting a Microsoft Access database to Oracle, an Access query is using the FIRST function.
What is the Oracle equivalent of the Microsoft Access FIRST function?
In the attempt to convert, the Oracle FIRST_VALUE function was used. However, the same results was not achieved.
Thanks,
(BLL)
Query:
h2. ACCESS:
SELECT
     TRE.GCUSNO,
     UCASE([DCUSNO]) AS DCUSNO_STD,
     *FIRST(UCASE([DNAME])) AS DNAME_STD*,
     *FIRST(UCASE([DADDR])) AS DADDR_STD*,
     *FIRST(UCASE([DCITY])) AS DCITY_STD*,
     TRE.DSTATE,
     FIRST(TRE.DZIP) AS DZIP,
     TRE.DREGN,
     TRE.DDIST,
     TRE.DSLSMN,
     TRE.DCHAIN,
     TRE.MARKET,
     TRE.MKTPGM,
     TRE.EUMKT
FROM
     TRE
GROUP BY
     TRE.GCUSNO,
     UCASE([DCUSNO]),
     TRE.DSTATE,
     TRE.DREGN,
     TRE.DDIST,
     TRE.DSLSMN,
     TRE.DCHAIN,
     TRE.MARKET,
     TRE.MKTPGM,
     TRE.EUMKT;
h2. ORACLE:
SELECT DISTINCT
TRE.GCUSNO,
UPPER(TRIM(TRE.DCUSNO)) AS DCUSNO_STD,
UPPER(TRIM(TRE.DNAME)) AS DNAME_STD,
UPPER(TRIM(TRE.DADDR)) AS DADDR_STD,
     FIRST_VALUE(UPPER(TRIM(TRE.DNAME)) IGNORE NULLS) OVER (ORDER BY TRE.GCUSNO) AS DNAME_STD,
     FIRST_VALUE(UPPER(TRIM(TRE.DADDR)) IGNORE NULLS) OVER (ORDER BY TRE.GCUSNO) AS DADDR_STD,
     FIRST_VALUE(UPPER(TRIM(TRE.DCITY)) IGNORE NULLS) OVER (ORDER BY TRE.GCUSNO) AS DCITY_STD,
TRE.DSTATE,
TRE.DZIP,
FIRST_VALUE(UPPER(TRIM(TRE.DZIP)) IGNORE NULLS) OVER (ORDER BY TRE.DZIP ASC) AS DZIP,
TRE.DREGN,
TRE.DDIST,
TRE.DSLSMN,
TRE.DCHAIN,
TRE.MARKET,
TRE.MKTPGM,
TRE.EUMKT
FROM CRM.TREUP100R TRE
GROUP BY
TRE.GCUSNO,
UPPER(TRIM(TRE.DCUSNO)),
TRE.DNAME,
TRE.DADDR,
TRE.DCITY,
TRE.DSTATE,
TRE.DZIP,
TRE.DREGN,
TRE.DDIST,
TRE.DSLSMN,
TRE.DCHAIN,
TRE.MARKET,
TRE.MKTPGM,
TRE.EUMKT;

A slight correction to odie's post. I think you want min not max to replicate the Access first function, but see below to be sure. So:
min(upper(trim(tre.dname))) keep (dense_rank first order by tre.gcusno) as dname_std
user10860953 wrote:How does one ignore null values?The min and max functions will ignore nulls automatically, so if there is a null value in tre.dname, it will not be be returned, unless all of the values are null. For example:
SQL> WITH t AS (
2     SELECT 65 id, 'ABCD' col FROM dual UNION ALL
3     SELECT 37, 'DEFG' FROM dual UNION ALL
4     SELECT 65, 'DEFG' FROM dual UNION ALL
5     SELECT 65, null FROM dual UNION ALL
6     SELECT 70, null FROM dual UNION ALL
7     SELECT 70, null FROM dual UNION ALL
8     SELECT 37, 'ABC' from dual)
9 SELECT id,
10         MIN(col) keep (DENSE_RANK FIRST ORDER BY id) min_dname_std,
11         MAX(col) keep (DENSE_RANK FIRST ORDER BY id) max_dname_std
12 FROM t
13 GROUP BY id;
        ID MIN_ MAX_
        37 ABC DEFG
        65 ABCD DEFG
        70John

How to use java api for function activity in embed oracle workflow?

because i can't install standalone oracle workflow successfully.
pls tell me how to use java api for function activity in embed oracle workflow?
are there some patch or pulg-in package?
ths a lot...........

The Java Function Activity Agent is not certified for Oracle Workflow embedded in Oracle Applications. Installing standalone workflow should be a lot easier than what you have found, although it looks like you did hit a Pentium 4 issue with the Oracle Universal Installer. I suggest you contact Oracle Support or Oracle Consulting for assistance.
because i can't install standalone oracle workflow successfully.
pls tell me how to use java api for function activity in embed oracle workflow?
are there some patch or pulg-in package?
ths a lot...........

Oracle Workflow Erroring on Function/Shell Script

We are in the process of upgrading databases and reimported all the OWB code into the new database.
Currently our OWB mappings all seem to run ok, but when I try to run a process flow I am hitting the following error
RPE--2075: Oracle Workflow failed to process the execution request for activity LD_EDW_MAIN:F_GET_DB_NAME. This may be because dependant objects have not yet been deployed. ORA-20010
F_GET_DB_NAME is a function and I checked and I see that the function executes properly
I also hit a similar error when trying to execute a shell script.
How would I go about deploying a function or a shell script?
Im relatively new to OWB and am being "force fed" learning since we lost our main OWB colleague.
Thank you

Thanks! for your reply.
I am using this API outside the workflow.I am using this API for iExpense to approve an Expense Report. In Expenses Workflow below are the processes:
1. AP_MANAGER_APPROVALPROCESS whihc is using NON_AME_APPROVAL_PROCESS and this is using REQUEST_APPROVAL_PROCESS and under this process there is a notification APPROVAL_REQUES. Now, I am completing this ACTIVITY as Approve and I am able to do that but problem is that REQUEST_APPROVAL__PROCESS is itself not getting completed and stuck here.
Please let me know how can I achieve that.
Thansks!
Sandy

Nintex Workflow and Access Control

Hello, can anybody help with getting owner permissions on Nintex workflows in Sharepoint 2010 with Powershell.
I also want to ask your opinion about Access control in Sharepoint 2010. Should all Access Control like AD, Sharepoint, Titus be in the hands of Administrator or some of it like Titus be in the hand of the Developers.
Best Regards Olafur_s
Icelandic DBA admin

Hello
Hemendra,<o:p></o:p>
Thank you
for your answer. I have developers that create sites and lists and they are all Site Collection admin. The problem is that they can go everywhere they want and look into all kinds of sensitive information and do all that they want to do. So basically they
are running the system. <o:p></o:p>
I am new to
Sharepoint as an admin but I have experience in other system like AD, Exchange, SQL. The evolution of this Sharepoint system here brought it to the point that the developers have too much admin rights and the system is not working well. I am trying to
find the fine line between the Administration part, my work, and the developers part and not steeping on the developers toe's.
Best regards Olafur_s<o:p></o:p>
Icelandic DBA admin

Oracle ASM file access control ?

dear all,
i'm confuse about oracle ASM file access control, so can anyone more explain clear for me?
thanks,

really this is only if there are many user groups on the server. if so then you can limit the users on the server to who can actually do anything with the diskgroups. If you are using OEM follow below. hope that helps
To manage Oracle ASM File Access Control:
1.Access the Oracle Automatic Storage Management Home page.
See "Oracle Automatic Storage Management Home Page" for instructions.
2.Click the Disk Groups link to display the Disk Groups property page.
3.Click a link in the Name column to select a disk group.
4.Click the Access Control tab to display the Access Control page.
On this page, you can add or remove users from a user group and create or delete user groups.

What packages allow access to motion control functions such as flex_initialize_controller, flex_start, etc.?

Hi,
I am new to programming using the motion control functions. I have already downloaded the software and drivers necessary to implement these functions. I am just confused which packages I need to include for Visual C++ so I have access to these functions. Thank you very much!

Hello Chowchow,
In order to use the NI Motion driver for C++, when you are installing the driver, ensure that Microsoft Visual C support is included in the installation. Afterwards, the NI Motion C reference can be found on the Start Menu under National Instruments > NI-Motion.
Hope this helps,
Robert
PS - The driver I refer to is the NI-Motion 7.0 driver.

Oracle EPM 11.1.1.3 - Assign Access Control in Shared Services for filters

We are using 11.1.3 version of EPM.
We have configured Essbase with Shared Services.
When I try to click Assign Access Control , it gives "loading.." thats it. Nothing else.
I have registered the application from EAS with Shared Services
Could you pelase suggest what I can do assign filters to users.
cheers,

Hi,
Provision the user with which you are logging into shared services as an Esssbase User and try.May this will solve your issue
Thanks.
Edited by: user9976039 on Oct 23, 2009 12:57 PM

Oracle Workflow contract - Jamaica

June 7 2004
Our client is a major bank in Jamaica and they have a contract
requirement for a Oracle Workflow consultant with the following skills. This is a 6
months contract. It would be 3 weeks/month in Jamaica and 1 week back
home. All expenses including travel, accomodation (5 star) and meals
would be taken care of. There would also be a per diem and a bonus at
the end of contract.
Client open to considering Canada/US based candidates. This is a very urgent position. Client wants to start the contract ASAP.
Oracle Consultant Workflow
· A Technical Consultant with expert experience with Workflow
· Expert technical experience and strong functional knowledge
· Experience using Workflow Builder as a tool
· Experience with configuration, customization, and modification of
pre-configured workflows with Workflow Builder to suite business
applications
· Customization of workflow and optional set-ups such as enabling
email process
· Experience with configuration/escalation/exceptions in workflow
· Workflow Builder is accessed at the systems administration level so
consultant has to have experience with systems administration
(application system administration)
· A workflow guru would have performed this function for
at least 50% of the time (rest of the time he/she would have
done application system administration, technical
design/development
Skills:
Very strong technical user level of workflow
Very strong experience with Workflow Builder
Oracle 11i, SQL or SQL Plus
Workflow knowledge from HR or elements of HR Module
Please contact:
Rohini Mehtani
IT Resource Consultant
Bevertec
[email protected]
416-695-7525 ext: 229

MRcoolpatti wrote:
Oracle Workflow builder raised below error for both Windows xp SP2 32bit and Windows 7 64 bit.
Workflow Builder 2.5
Run- time error '367'
Can't load (or register) custom control: 'wfnvg20.ocx'
Anyone have any idea?
Please see (Runtime Error 367 Cannot Register wfnvg20.ocx Message When Starting The Workflow Builder (Doc ID 123457.1)).
Thanks,
Hussein

Access Control functionality in Oracle workflow

Similar Messages

Maybe you are looking for