AUDITTRAIL ON FND_USERS AND FND_USER_RESP_GROUPS

Hello, I am trying to enable Audit Trail on my FND_USER and
FND_USER_RESP_GROUPS tables for tracking the user creation and responsibility
changes. I got stuck during the configuration process.
I couldnt find the FND_USER and FND_USER_RESP_GROUPS tables in the LOV to
select them.
Here is what I am doing....
) Set AuditTrail:Activate to Yes.
2) Set Security->Audit Trail -> Install and selected APPLSYS for Oracle User
Name and Audit Enabled is checked.
3)Set Security -> Audit Trail -> Groups and Selected Application Object Library
for Application name. Gave a name for Audit Group. and Group State is Enable
Requested.
In the Audit Tables portion,
I used the browse buttion to select and queried for FND_USER% and I dont see
FND_USER and FND_USER_RESP_GROUPS tables there. All I see is
FND_USER_DESKTOP_OBJECTS and FND_USER_PREFERRENCES.
Any ideas?

Check Note: 420996.1 - How to Enable the Audit Trail On the Table APPLSYS.FND_USER
https://metalink.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=420996.1

Similar Messages

Inventory Org Based security

Hi All,
We are implementing the security based on inventory organizations in BIA 7.9.5.1
The following OOTB initialization block query provided for the security is not working.
Interestingly the query returns me the required inventory org ids when i run it in the background but not when i login into BIEE.
SELECT
DISTINCT 'INV_ORG', BIS_ORGANIZATIONS_V.ID
FROM FND_USER_RESP_GROUPS, BIS_ORGANIZATIONS_V
WHERE FND_USER_RESP_GROUPS.RESPONSIBILITY_ID = BIS_ORGANIZATIONS_V.RESPONSIBILITY_ID
AND FND_USER_RESP_GROUPS.START_DATE < SYSDATE
AND (CASE WHEN FND_USER_RESP_GROUPS.END_DATE IS NULL THEN SYSDATE ELSE TO_DATE(FND_USER_RESP_GROUPS.END_DATE) END) >= SYSDATE
AND FND_USER_RESP_GROUPS.USER_ID = (CASE WHEN 'VALUEOF(NQ_SESSION.EBS_SSO_INTEGRATION_MODE)' = 'Integrated'
THEN 'VALUEOF(NQ_SESSION.OLTP_EBS_USER_ID)' ELSE '(select FND_GLOBAL.USER_ID from dual)' END)
AND FND_USER_RESP_GROUPS.RESPONSIBILITY_ID = (CASE WHEN 'VALUEOF(NQ_SESSION.EBS_SSO_INTEGRATION_MODE)' = 'Integrated'
THEN 'VALUEOF(NQ_SESSION.OLTP_EBS_RESP_ID)' ELSE TO_CHAR(FND_USER_RESP_GROUPS.RESPONSIBILITY_ID) END)
AND FND_USER_RESP_GROUPS.RESPONSIBILITY_APPLICATION_ID = (CASE WHEN 'VALUEOF(NQ_SESSION.EBS_SSO_INTEGRATION_MODE)' = 'Integrated'
THEN 'VALUEOF(NQ_SESSION.OLTP_EBS_RESP_APPL_ID)' ELSE TO_CHAR(FND_USER_RESP_GROUPS.RESPONSIBILITY_APPLICATION_ID) END)
Has someone encountered this issue and knows a workaround?
Thanks,
Sid

Hi Ragav,
Could you post the name of the InitBlock you are using? I was looking at the OOTB rpd and could not find it.
Apart from that - what do you mean saying
Interestingly the query returns me the required inventory org ids when i run it in the background but not when i login into BIEE.How have you checked if it returns the required ids when login to BIEE?
Regards,
Michal
P.S. Make sure you have "row-wise initialization" checked in your InitBlock.
Edited by: Mich@lB on Jun 25, 2009 2:43 PM

Apps password unknown

While running fndcpass to change passwords for a new clone, the apps password somehow was set to an unknown value. I know the old apps password, but am not able to successfully connect to the database with it. (I can connect with that password to the production environment which is the source for the clone.)
We have a custom script that runs fndcpass. (This was my first time using this script and creating a clone.) It makes a copy of fnd_users and fnd_oracle_userid tables. The first time I ran it, it errored. So ... I ran it again (and over-wrote fnd_users and fnd_oracle_userid). I then learned fndcpass should be run from the database server - I was on the apps server. So ... I ran it on the database server. It got to a certain point in the script and the script stopped. (I later learned this happens due to an error in the script and that one simply needs to enter the password again - but I didn't know that.) Somewhere in here the apps account became locked - I unlocked it. Now I am unable to run fndcpass because the apps password is unknown.
Does it have anything to do with the values in fnd_users and fnd_oracle_userid? If so, can I get obtain the data for those two tables from the current production database? (The clone datafiles are from 1/27/10 and today is 3/1/10). If the issue is unrelated to fnd_users and fnd_oracle_userid data, how can I set the apps password? (Oracle documentation insists that one should not use 'alter user' to reset the apps or applsys passwords.) I'm trying to avoid starting the clone over. I welcome any suggestions on how I can resolve the issue with the unknown apps password.

Hi,
So ... against the recommendation of Oracle, I decided to issue an 'alter user' and change the password. Then I get the following error when running FNDCPASS: 'FNDCPASS was not able to decrypt password for <module/user> during applsys password change.' Do not use the alter command to change the password as this is not supported.
So ... then I decided I would try exp/imp the FND_USER and FND_ORACLE_USEID data from production. However, I get the following error when exporting the FND_USER data from production: 'EXP-00003: no storage definition found for segment(407, 25131).'
At this point I think I am throwing in the towel and going to start the clone over. Am new to Forum and didn't see answer in FAQ ... how do I close this?I believe this is the right approach to do for now. Once you are done with the clone, please make sure you take a backup of the two tables on the cloned instance before changing the apps password using FNDCPASS.
To close the thread, just mark it as answered.
Regards,
Hussein

What are the tables Oracle EBS connector can connect to?

Hello,
Requirement
As part of the project requirement for Oracle EBS application, we have the concept of BUYER account (PO_AGENTS) and Supplier account (PO_VENDORS). When the account has to be disabled from FND_USER and HR foundation table, the account has to be disabled (or removed based on the requirement) from all linked tables "PO_VENDORS" and "PO_AGENTS".
Questions
1) Does the out of the box Oracle EBS connector handles removing users from the tables "PO_AGENTS" and "PO_VENDORS" apart from "FND_Users" and "HR foundation" table?
2) If no, what are the recommendations for achieving the above requirement?
Thank You!

No, OOTB the connector will not revoke the user entry from tables like PO_AGENTS etc .. You can customize the connector to do that .
Explore the stored procedure which can revoke entries from the mentioned tables and wire it via a adapter .
Regards
Suren

OBIEE 11.1.1.6.2 Row Wise Init for Roles variable

Gurus,
Why is the NQ_SESSION.ROLES ( Row Wise Initialized ) behaving differently when compared to other Row Wise initialized session variables.
I am using EBS Authentication and Authorization for OBIEE, so my authorization query is
SELECT DISTINCT 'ROLES', RESPONSIBILITY_KEY
FROM FND_USER,FND_USER_RESP_GROUPS, FND_RESPONSIBILITY_VL
WHERE FND_USER.user_id=FND_USER_RESP_GROUPS.user_id
AND FND_USER_RESP_GROUPS.RESPONSIBILITY_ID = FND_RESPONSIBILITY_VL.RESPONSIBILITY_ID
AND FND_USER_RESP_GROUPS.RESPONSIBILITY_APPLICATION_ID = FND_RESPONSIBILITY_VL.APPLICATION_ID
AND FND_USER_RESP_GROUPS.START_DATE < SYSDATE
AND (CASE WHEN FND_USER_RESP_GROUPS.END_DATE IS NULL THEN SYSDATE ELSE TO_DATE(FND_USER_RESP_GROUPS.end_Date) END) >= SYSDATE
AND FND_USER.user_name = 'VALUEOF(NQ_SESSION.USER)';
Now I plan to use these Roles( EBS Responsibility name) which I have populated in a DB table against some Cost Center and below is the how I view the data in DB.
ID | PROFIT_CENTER | RESPONSIBILITY
0 | 0 |0
1 | 100 |BI_Fin_Role
2 | 200 |BI_P2P_Role
3 | 300 |BI_Inv_Role
Then my Profit Centers Initialization Block is now
SELECT DISTINCT 'PROFIT_CENTER', PROFIT_CENTER FROM WC_OBIEE_PC_SECURITY WHERE RESPONSIBILITY IN (VALUELISTOF(NQ_SESSION.ROLES))
So User1 has BI_Fin_Role and PC_Security Role so does the User2 has BI_Inv_Role and PC_Security now when User1 logs in they should see only 100 Profit center data and User2 should see only 300.
I have created data filter for that application role (PC_Security) and limiting with "Dim.Profit Center"."Profit Center" = VALUEOF(NQ_SESSION."PROFIT_CENTER")
However first problem I encounter is there is no value definition for PROFIT_CENTER, snap that means the VALUELISTOF(NQ_SESSION.ROLES) value is not being passed or recognized by whenever BI Server sends that query to DB.
This is confirmed by my query log which says:
[2013-04-29T12:49:06.000+00:00] [OracleBIServerComponent] [TRACE:5] [USER-39] [] [ecid: 11d1def534ea1be0:48033065:13e4213bbd0:-8000-0000000000008dc8] [tid: 47796940] [requestid: fffe0313] [sessionid: fffe0000] [username: ] -------------------- An initialization block named 'PC_Security', on behalf of a Session Variable, issued the following SQL query: [[
SELECT DISTINCT 'PROFIT_CENTER', PROFIT_CENTER FROM WC_OBIEE_PC_SECURITY WHERE RESPONSIBILITY IN (VALUELISTOF(NQ_SESSION.ROLES))
Returned 0 rows. Query status: Successful Completion
So I try to issue the SQL to BI Server thru Issue SQL Directly:
SELECT "Profit Center"."Profit Center" FROM "SLA Details" WHERE "Profit Center"."Profit Center" = VALUEOF(NQ_SESSION.ROLES)
and the query log gives be the below log which blew my mind as its being delimited by ';'
select distinct T1260626.ACCOUNT_SEG3_CODE as c1
from
W_GL_ACCOUNT_D T1260626 /* Dim_W_GL_ACCOUNT_D */
where ( T1260626.ACCOUNT_SEG3_CODE = 'BIAuthor;BIConsumer;PC_Security;BI_Fin_Role;AuthenticatedUser' )
I have other Row Wise Init blocks for HR_ORG which when fired and used in reports give be stings ('1000','2000',...) which is what I was expecting to see in the filter and query here.
Am I doing something wrong here can someone please point me to right direction please.
Any help is much appreciated.
Thanks,
VidyaS
Edited by: VidyaS on Apr 29, 2013 2:47 PM

This is because the ROLES variable in OBIEE 11g is designed to retrieve the LDAP or DB groups etc.. in form of semicolon delimiters this would be not the same case with other Row Wise init blocks.
Refer to : OBI 11g - LDAP and semicolon-delimited string for Groups [ID 1274964.1]
HTH,
SVS

What is OLite database which come with SOA suite ?

Hi
Thank you for reading my post
I saw that there is something named OLite database that installs with SOA suite in Standard mode , can some one explain me what is this product ?
thanks

oLite is the shortcut for Oracle Lite - which is a small database, storing
a) bpel data, like it's process artifacts, as well as execution data - audittrails,
b) dt and runtime data from ESB
c) OWSM configurations
without this component running, the SOA Suite will not work
For production use we recommend to install a fledged oracle db - and run the repository creation assistant, which will create the needed db objects
hth clemens..

Opening and Closing Stock Calculation In SAP BPC 10.0 NW

Hello Experts,
Need your guidance on this calculation.
BI Cube: Receipts and Issues only Available on day basis
BPC Report / Cube Context
Product = Product1, Product2,
Account = receipts, Issues, Opening Stock, Closing stock,
Flow = Other
Audittrail = Input
UOM = QTY
rptcurrency = LC
Category = Actual
TIme = All Periods (Monthly)
Plant = Plant1, Plant2, Plant3, Plant4
In the Cube I don't Have Opening Stock, without Which I cannot calculate Closing stock.
Scenario: If I Enter Manually Opening stock for all products at some starting point, say In Year 2008 Jan. How To take this closing stock of this month automatically to next month opening stock and So on and so forth to following Periods? Is it possible through "Carry Forward Business rule" in this case, as Closing stock is a calculated value using Member dimension Formula. I am having receipts and issues in Account dimension.
Dimension Formula used: Closing Stock = Opening Stock+Receipts- Issues.
Please find attachment of the report screen shot.
Thanking you
Praveen

Hello Vadim,
1. The Cube storage Type is "Periodic".
2. Acctype of the account dimension is "AST"
3. Time Dimension Is based on Month.
ID
Description
RELEVANT
Base Period
CLOSED
Level
Month Number
Period
TIMEID
Year
Calendar
2006.01
2006 Apr
1
MONTH
1
APR
20060100
2006
2006.Q1
2006.02
2006 May
2
MONTH
2
MAY
20060200
2006
2006.Q1
2006.03
2006 June
3
MONTH
3
JUN
20060300
2006
2006.Q1
2006.04
2006 July
4
MONTH
4
JUL
20060400
2006
2006.Q2
2006.05
2006 August
5
MONTH
5
AUG
20060500
2006
2006.Q2
2006.06
2006 September
6
MONTH
6
SEP
20060600
2006
2006.Q2
2006.07
2006 October
7
MONTH
7
OCT
20060700
2006
2006.Q3
2006.08
2006 November
8
MONTH
8
NOV
20060800
2006
2006.Q3
2006.09
2006 December
9
MONTH
9
DEC
20060900
2006
2006.Q3
2006.10
2007 Jan
10
MONTH
10
JAN
20061000
2006
2006.Q4
2006.11
2007 Feb
11
MONTH
11
FEB
20061100
2006
2006.Q4
2006.12
2007 Mar
12
MONTH
12
MAR
20061200
2006
2006.Q4
2006.Q1
2006 Q1
3
QUARTER
3
Q1
2006
2006.TOTAL
2006.Q2
2006 Q2
6
QUARTER
6
Q2
2006
2006.TOTAL
2006.Q3
2006 Q3
9
QUARTER
9
Q3
2006
2006.TOTAL
2006.Q4
2006 Q4
12
QUARTER
12
Q4
2006
2006.TOTAL
2006.TOTAL
2006
12
YEAR
12
TOTAL
2006
Thank You
Praveen

ADF security : How to get fnd_users list in weblogic server

Hi All,
I have a question related to ADF security.
I am able to apply ADF security to the application, where users information and roles are defined in jazn.xml file.
On deployment, users/ roles information is being successfully ported to weblogic server.
But my requirement is to fetch users information from fnd_users table. If you have any idea as how to get the fnd_users data to weblogic, please reply.
Thanks,
Randhir

Thanks John.
I went through the link and got steps for authentication with fnd_users.
I have one more question on this.
Do I need to enable jazn.xml for implementing security or only the steps given in this link is sufficient?
Since roles are also stored into fnd table, how to secure the taskflow? (roles are not defined in jazn.xml)

Users and Responsibilities

Which tables in the database store information about the users and their associated responsibility?

Hello.
You can use this query:
select
fu.user_id,
fu.user_name,
fu.description,
fr.responsibility_id,
fr.application_id,
fr.responsibility_key,
frt.responsibility_name,
furg.creation_date
from fnd_user fu,
fnd_responsibility fr,
fnd_responsibility_tl frt,
fnd_user_resp_groups furg
where fu.user_name = '&USER'
and furg.responsibility_id = fr.responsibility_id
and frt.responsibility_id = fr.responsibility_id
and (fr.end_date IS NULL)
AND (furg.end_date IS NULL)
and frt.language = '&language'
and fu.user_id = furg.user_id;
Credit to JEFF ELLARD, author of the query.
Hope it helps
Octavio.

Changing default database and application passwords

Hi,
We have default passwords for our newly configured Oracle ERP (R12).
I have a concern regarding the changing of default password. Does changing the default passwords will have any effect on normal working of ERP and database.
I know that we shouldn't change default APPLSYSPUB password. What about the following default passwords?
a) Default accounts having default password in database (DBA_USERS):
CTX SYS
OLAPSYS
DBSNMP
DMSYS
GL (oracle users .e.g AP, GL, AR)
APPLSYSPUB
OUTLN
PERFSTAT
SYS
b) Default accounts present in Oracle Application (FND_USERS) :
IBE_GUEST
OP_CUST_CARE_ADMIN
ASGADM
MOBILEADM
APPSMGR
IBEGUEST
OP_SYSADMIN
AUTOINSTALL
WIZARD
IEXADMIN
ASGUEST
IBE_ADMIN
ERP version : 12.1.2
Database Version: 11.2.0.1
Thanks in advance.
Regards,
Gaurav

Hi Gaurav,
Yes as stated by Srini, It's highly recommended that you change tyhe default password in order to safeguard your instance by outside threats.
But please be cautious as you cant change these accounts as "alter user <username> identified by <new password>", but rather use FNDCPASS utility. I advice you to check on the TEST system before implementing on the PROD instance if you dont have prior experience using FNDCPSAS.
Please also refer notes:
How to Change Applications Passwords using Applications Schema Password Change Utility (FNDCPASS or AFPASSWD) (Doc ID 437260.1)
FNDCPASS Troubleshooting Guide For Login and Changing Applications Passwords (Doc ID 1306938.1)
How to change passwords to include special characters using FNDCPASS (Doc ID 1336479.1)
FNDCPASS Utility New Feature: Enhance Security With Non-Reversible Hash Password (Doc ID 457166.1)
Also see forum search:
Forum Search: FNDCPASS
Hope this helps!
Best Regards

Rebuild/Redesign FND_USER_RESP_GROUPS view in 12.1.1

Hi All,
DB:11.1.0.7.0
Oracle Apps:12.1.1
OS:Red Hat Linux 4 86x64
Issue Description:"Switch Responsibility" (Top Hat) Takes Much Longer In Forms more than 40 seconds for LOV to populate.
Did anyone try Rebuilding/Redesigning FND_USER_RESP_GROUPS view in 12.1.1.
or is there any patch available for 12.1.1 to resolve the above issue!
We have tried all the steps in note:ID 745701.1 but still the issue persists!!!
Thanks for your time!
Regards,

Hi,
Do you have the statistics collected up to date?
Try to rebuild the indexes on the tables mentioned in (Note: 270125.1 - Responsibility LOV takes long time after Login) and see if this helps.
If the above does not help, enable trace and generate the TKPROF file to find out why it takes that long to switch between the responsibilities.
Thanks,
Hussein

How to synchronize wf_roles with fnd_users

good day,
Is there any concurrent programs to synchronize fnd_users or per_people_x users with wf_roles, or wf_local_roles.
thanks

The job synchronizes FND Users with the Workflow directory service (plus any other systems you specify). PER is a special case, and will only be synchronized with the Workflow directory service if they are associated with a user - otherwise the records are not included. If they have corresponding HZ_PARTY records, then these may be synchronized, but should not really be used for notifications, since there is no login mechanism for the users to view the notification sent to a party record.
HTH,
Matt
WorkflowFAQ.com - the ONLY independent resource for Oracle Workflow development
Alpha review chapters from my book "Developing With Oracle Workflow" are available via my website http://www.workflowfaq.com
Have you read the blog at http://thoughts.workflowfaq.com ?
WorkflowFAQ support forum: http://forum.workflowfaq.com

ORACLE APPLICATIONS AUDITTRAILS에 대한 이해

제품 : AOL
작성날짜 : 2003-11-24
ORACLE APPLICATIONS AUDITTRAILS에 대한 이해
========================================
PURPOSE
I. AuditTrail은 무엇인가?
II. AuditTrails 을 설정하는 방법
III. AuditTrail Shadow Tables, Triggers, Procedures, and Views
IV. AuditTrail 사용을 위한 요구사항 및 제약사항
V. AuditTrails 을 해제시키는 법
Explanation
I. AuditTrail은 무엇인가?
AuditTrail 은 데이타의 변화에 대한 히스토리를 가진다.
주로 아래와 같이 3가지 부분에 대한 정보를 가진다.
o 무엇이 변했는지
o 누가 바꾸었는지
o 언제 자료가 바뀌었는지
오라클 폼상에서 자료를 수정한 경우, 로그한 유저정보와 변경한
데이타베이스 테이블상의 정보를 저장한다.
II. AuditTrails 을 설정하는 방법
a.) Define Audit Installations
Define Audit Installations Form에서 정의한다.
b.) Define Audit Groups
Define Audit Groups Form 에서 Audit을 할 테이블과 칼럼정보를
정한다.
c.) Audit Trail Update Tables Report을 실행하여 Audit이
동작되도록 한다.
III. AuditTrail Shadow Tables, Triggers, Procedures, and Views
a.) Shadow Tables
Original Table명의 앞에서 26자리까지의 문자와 "_A"로
생긴다. ( 예를 들어 FA_BOOKS => FA_BOOKS_A )
o AUDIT_USER_NAME - Applications User Id
( OPERATIONS )
o AUDIT_TIMESTAMP - 발생시간
o AUDIT_TRANSACTION_TYPE
I - Insert
U - Update
D - Delete
L - Last
C - Current
o AUDIT_TRUE_NULLS - NULL에서 값이 바뀐 칼럼리스트
o PRIMARY KEY
b.) Auditing Triggers and Procedures
o Audit trigger 이름은 Original Table의 앞 26자리문자에
"_AI"/"_AU"/"_AD"가 붙는다 ( I/U/D 는 Insert/Update/
Delete를 의미한다. )
o Procedure trigger이름은 Original Table의 앞 26자리문자에
"_AIP"/"_AUP"/"_ADP"가 붙는다( I/U/D 는 Insert/Update/
Delete를 의미한다. )
c.) Views
o View 이름은 Original Table의 앞 26자리문자에
"_AC#"/"_AV#" ( C/V 는 View의 성격을 의미한다.)
o Each view allows slightly different access to the data.
_AC로 끝나는 뷰는 특정시간의 해당레코드의 값을 보여주고,
_AV로 끝나는 뷰는 언제 값이 변했는지에 대한 정보를
보여준다.
IV. AuditTrail 사용을 위한 요구사항 및 제약사항
o 한 테이블당 최대 240칼럼.
o LONG/RAW/LONG RAW칼럼에 대해서 할 수 없다.
o primary key칼럼을 받드시 포함하여야한다.
o 한번 Audit에 포함된 칼럼은 뺄 수 없다.
V. AuditTrails 을 해제시키는 법
System Administrator권한에서 Define Audit Groups라는 폼에서
State라는 칼럼의 값을 아래 3가지 값중 하나로 선택하고
"Audit Trial Update Tables report"를 실행한다.
옵션들
1. Disable Prepare for Archive
Audit대상 테이블의 현재 값을 모두 Shadow Table로 카피하고,
Auditing trigger들을 중지시킨다.
2. Disable Interrupt Audit
Audit대상 테이블의 마지막 수정된 값을 Shadow Table에 넣도록
Trigger를 수정한다. 더이상 trigger가 실행되지않는다.
3. Disable Purge Table
모든 Auditing Trigger들을 중지시키고, showdow table의 데이타를
삭제한다.
Example
Reference Documents
Note:60828.1

Display users and their resposibilites

Dear all,
I need a query to display all the application users with their responsibility assigned and the request group (ids).
Atlease let me know from which tables I can fetch those details.....
Thanks
Yusuf

Yusuf,
You may try the following:
SQL> SELECT distinct u.user_id, u.user_name, r.responsibility_name
FROM fnd_user u,
fnd_user_resp_groups g,
fnd_application_tl a,
fnd_responsibility_tl r
WHERE g.user_id(+) = u.user_id
AND g.responsibility_application_id = a.application_id
AND a.application_id = r.application_id
AND g.responsibility_id = r.responsibility_id
ORDER BY 2;

Authentication against two user lists and knowing the difference?

I have a security realm that is the standard out-of-the-box security realm with one modification. I created an authentication provider to validate users and groups defined in a 3rd party data store. The control flag for each authentication provider (the default one and mine) is set to 'sufficient' so that there is one user account that allows me to log into the WebLogic console that is not defined in the 3rd party data store.
If I run my application and log in with the WebLogic admin userid, the security realm successfully authenticates the user (it passes the default authentication provider) and permits entry to my application. Unfortunately, this is not good for me. The application, at startup, goes to the 3rd party data store and retrieves more information about the user that just logged in. For the WebLogic admin account, it will not find the user.
Is there a way to configure WebLogic security such that a particular application can ensure authentication by a specific provider?
Another environment I need to handle is having two applications deployed, each needing to authenticate its users with two different data sources containing valid users and groups.
Thanks! Any help is much appreciated!

Hi,
I have found the fnd_web_sec returns a boolean for a valid username / password combination but I'm still not sue how I can integrate this.
Sorry for being thick but this is what I'm trying to do.
I have an application built in htmldb that I want to be accessable from the e-business suite applications main menu. I've set this up and a user can select it how ever I have no authentication so even though its not assigned to you you can still goto the app by just entering the url. So when a user goes to that htmldb app I want to check that they have that resp assigned to them, this can be done with the following
select 1 from apps.fnd_user_resp_groups ur, apps.fnd_user u
where u.user_name = :APP_USER and u.user_id = ur.user_id
and ur.responsibility_id = XXXX
The two problems I have are:-
If a user goings straight to the htmldb url I need to get them to log in and use the e-business suite login (we dont have SSO)
Or if they are already in e-business suite and go to the htmldb app via the main menu page I need to pass that authentication across.
I hope this makes sense.

AUDITTRAIL ON FND_USERS AND FND_USER_RESP_GROUPS

Similar Messages

Maybe you are looking for