Grants in the AOL Security Model

Question

Hi
Here's is the business scenario:
1. There is an Object 'Notes' defined that stores Notes (Notes are text information captured in say a Service Request submitted by an Employee). These are stored in table 'JTF_NOTES_B'.
2. There are two Object Instance Sets defined for this object - Private Notes and All Notes.
a. Private Notes are Notes that only its creator can view (it is a status on the Note) - the predicate on this is:
&TABLE_ALIAS.NOTE_STATUS = 'PRIVATE'
AND &TABLE_ALIAS.CREATED_BY = FND_GLOBAL.USER_ID
b. Public Notes are Note that can be viewed by anyone.
&TABLE_ALIAS.NOTE_STATUS <> 'PRIVATE'
3. There are two Grants defined:
a. Grant to allow all users to view Private Notes that they have created
b. Grant to allow all users to view all Public Notes (irrespective of the creator)
Question:
How are these two Grants resolved in the Database? Is it via a Union on these two Object Instance Sets like:
select *
from JTF_NOTES_B
where &TABLE_ALIAS.NOTE_STATUS = 'PRIVATE'
AND &TABLE_ALIAS.CREATED_BY = FND_GLOBAL.USER_ID
UNION
select *
from JTF_NOTES_B
where &TABLE_ALIAS.NOTE_STATUS <> 'PRIVATE'
or via an OR clause like?
select *
from JTF_NOTES_B
where ( &TABLE_ALIAS.NOTE_STATUS = 'PRIVATE'
AND &TABLE_ALIAS.CREATED_BY = FND_GLOBAL.USER_ID)
OR &TABLE_ALIAS.NOTE_STATUS <> 'PRIVATE'
OR is there any other way that these two Grants will be resolved?
Thanks.
Edited by: dejoseph on Mar 18, 2013 1:16 PM

Answer 1

Hi, Please go through the SQL query below.
SELECT
EL.InstanceName,
COALESCE(C.Path, 'Unknown') AS ItemPath,
EL.UserName,
EL.ExecutionId,
CASE(EL.RequestType)
WHEN 0 THEN 'Interactive'
WHEN 1 THEN 'Subscription'
WHEN 2 THEN 'Refresh Cache'
ELSE 'Unknown'
END AS RequestType,
EL.Format,
Parameters,
CASE(EL.ReportAction)
WHEN 1 THEN 'Render'
WHEN 2 THEN 'BookmarkNavigation'
WHEN 3 THEN 'DocumentMapNavigation'
WHEN 4 THEN 'DrillThrough'
WHEN 5 THEN 'FindString'
WHEN 6 THEN 'GetDocumentMap'
WHEN 7 THEN 'Toggle'
WHEN 8 THEN 'Sort'
WHEN 9 THEN 'Execute'
ELSE 'Unknown'
END AS ItemAction,
EL.TimeStart,
YEAR(EL.TimeStart) AS Start_Year,
MONTH(EL.TimeStart) AS Start_Month,
DATENAME(MONTH,EL.TimeStart) AS Start_Month_Name,
DATENAME(DW,EL.TimeStart) AS Start_Day_Of_Week,
DATEPART(WEEKDAY,EL.TimeStart) AS Start_Day_Number_of_Week,
EL.TimeEnd,
EL.TimeDataRetrieval,
EL.TimeProcessing,
EL.TimeRendering,
CASE(EL.Source)
WHEN 1 THEN 'Live'
WHEN 2 THEN 'Cache'
WHEN 3 THEN 'Snapshot'
WHEN 4 THEN 'History'
WHEN 5 THEN 'AdHoc'
WHEN 6 THEN 'Session'
WHEN 7 THEN 'Rdce'
ELSE 'Unknown'
END AS Source,
EL.Status,
EL.ByteCount,
EL.[RowCount],
EL.AdditionalInfo,
C.Name,
C.CreatedByID,
C.ModifiedByID,
C.Description,
C.CreationDate,
C.ModifiedDate,
CASE
WHEN C.TYPE=1 THEN 'Folder'
WHEN C.TYPE=2 THEN 'Report'
WHEN C.TYPE=3 THEN 'XML'
WHEN C.TYPE=4 THEN 'Linked Report'
WHEN C.TYPE=5 THEN 'Data Source'
WHEN C.TYPE=6 THEN 'Model'
WHEN C.TYPE=8 THEN 'Shared Dataset'
WHEN C.TYPE=9 THEN 'Report Part'
END AS Type_Description
FROM
ExecutionLogStorage AS EL
LEFT OUTER JOIN Catalog AS C ON EL.ReportID = C.ItemID
Anything in the Format column is not 'RPL' is all exported in some manner or the other.
Hope this helps...........
Ione