ADF Security: "create" privilege in EO?

Question

Hello all,
I see from the Fusion Developer's Guide that we have permissions that can be associated with an Entity Object for Read, Delete, and Update. There is nothing specified for "create." Is the create permission included with Update and/or Delete?
Best,
John

Answer 1

Hi John
From memory it's missing but it sort of logically makes sense because the EO represents a single record that must already exist. As such we're probably missing a set of ADF BC security privs at the VO level (or maybe the EntityCache) that include create, execute, next, prev + those inherited from the individual EO.
If memory (again) serves me correctly Frank (or maybe Steve?) demonstrated (or at least commented that it's possible) how to extend the framework to include new privs, but I can't find the link at this stage.
The ADF BC Security 11g implementations at EO levels seems somewhat clunky and like the 10.1.3 features I think unless improved wont be used. This is what our notes say after we previously researched the capabilities:
"Entity Objects are secured via the Entity Object document window, selecting the General tab, followed by the operation you wish to secure under the Security heading. Note if you do not enable an operation within this section, this implies the operation is not secured and by default users *will* be able to execute the operation. For example enabling the read option but not the update option, implies that users must be explicitly granted the read operation before they can view the Entity Object, however (counter-intuitively) updating the Entity Object is allowed"
Sorry this isn't a direct answer to your question, but hopefully helpful.
Regards,
CM.