OAF pages open up with error when FND_VALIDATION_LEVEL profile set to ERROR

Question

Hi,
We get error “You have insufficient privileges for the current operation. Please contact your System Administrator.” when we access the OAF page on a click of a link .
On a click of a link in a OAF page a new OAF page should open up. This is achieved by following piece of code
String javaS = (new StringBuilder()).append("javascript:openWindow(top, 'OA.jsp?page=/XXX/oracle/apps/cs/XXX/XXX/webui/ViewRulesPG&paramRoot=RULES&reportname=").append(strViewRepName).append("&retainAM=N&addBreadCrumb=N','modal'").append(",{width:screen.width,height:screen.height-30,top:0,left:0").append(",resizable:false},true, 'document', null);void(0);").toString();
bodyBean.setOnLoad(javaS);
This works fine when the FND_VALIDATION_LEVEL is set as 'None' but gives the error when the profile is set as 'Error'. We can't go with this work around.
Please suggest
Regards,
Mrugesh

Answer 1

FND_VALIDATION_LEVEL is a profile option that should always be set to ERROR. It is not advisable to set it to NONE, just to enable your javascript. The profile ensures that the page is well secured when accessed through Oracle Applications, applies the necessary security similar to seeded OAF pages. OA Framework does not support javascript functionality such pop-ups (you can do it but ) but does not guarantee that the page is secure from outside world (web traffic or cross-browser attacks) when the FND_VALIDATION_LEVEL=None. Work with Dialog pages instead of pop-ups or otherwise limit the page functionality, as javascripting is not recommended in OAF pages.
-Vikram