Securing Private Information

Like a lot of companies we need to 'hide' certain columns of data - such as social security number - from most of our Discoverer community. I know that I can address this by creating two custom folders - one with the social security number column defined, one without social security number being defined - for each of my "base" views/queries but that seems to me to be unnecessary overhead.
In the application I address this with a forms personalization which would restrict users without the appropriate access (i.e. responsibility) from being able to view the social security number field on the form. With such a 'model' already implemented in the PUI, I'm wondering if there is something conceptually similar I can do with apps mode security in Discoverer that would give me the same result ? In other words, is there are easy way to leverage my existing PUI (EBS application) "non-viewing SSN" responsibility with Discoverer to hide SSN from users who shouldn't see SSN ?
Thanks in advance to all who reply !
Jeff

Hi Jeff,
This sounds like a great opportunity for you to use VPD to secure your columns. Rod West has documented his approach quite well (see http://ascbi.com/downloads/Third%20Party%20Documents/Using%20VPD%20to%20secure%20Discoverer%20Reports.pdf). I would also recommend looking over Tom Kyte's section on fine grain access control in his Expert One On One book. Both of these sources provide some very simple examples which can be implemented just to get a feel for how it works.
Suppose you did not want to go this route, you might consider just making sure the eul owner has the execute privilege for the FND_GLOBAL package. You could then use one of its function, RESP_NAME to obtain the responsibility in your end user layer. Next, it would be easy to implement a statement like the following:
decode (apps.fnd_global.RESP_NAME, desired_responsibility, column_wanting_to_share_with_desired_responsibility, NULL)
For more on this, see the following:
http://download.oracle.com/docs/html/B10270_01/oracle_a.htm#1004614, look for the section, How to display your Oracle Applications database user name and responsibility in a workbook.
Patrick

Similar Messages

  • Is there a way to place an encrypted document on the iPhone, a document that contains passwords and private information, really well protected from hackers?

    Is there a way to place an encrypted document on the iPhone, a document that contains passwords and private information, really well protected from hackers?
    Can such a document be exempted from the cloud feature, a feature that I use for the rest of my stuff?
    If so, how can I do this?

    Yeah, but 1Password charges for both the iPhone client AND the Mac/Windows client, and it ain't cheap! Plus, it only syncs via Dropbox, and where I work Dropbox is banned due to security concerns.
    Sure, there is Secure Notes, a free form entry part of 1Password, but a bug in the program will not let you view all the text you can put in the field!! You have to EDIT the text to see the whole list! What if you accidentally delete or change an entry while scrolling through your entries??
    Plus NONE of the programs I have tried, and I have tried a lot, can find text IN the file - do a search and it will tell you what file/folder the text is in, but YOU have to scroll down through 400 entries one at a time looking for the entry.
    I use a program called Secure Text - I have many admin passwords, and DO not need a field based program. Secure Text is totally freeform entry. However, it suffers from the same search issue.
    If someone knows of a secure text program that uses a file/folder type of layout, free form entry, AND can actually tell you where in the file/folder the text you searched for is, PLEASE let me know! Plus sycing via some method other than Dropbox would be a plus.
    Before I got my iPhone, I used a program called Tombo for my WinCE based system AND my Windows workstation, and the synced up fine without iTunes, internet, DropBox type functionality or any of that horsecoller stuff Apple likes to throw on your neck.

  • Hiding private contact and other private information

    I have used a Palm PDA for years and depend on its ability to hide private contacts and private information while having those not marked private visible.  (To view the private information one must enter a password.)
    I am trying to migrate from using both the Palm PDA and Blackberry to using the Blackberry 8830 World Edition exclusively.  Is this feature available on the Blackberry?  That is to have certain information visible only after a password is entered?   If not, is there a third party program available which performs that function? 
    Thanks for your assistance.
    CGBanks
    Message Edited by cgbanks1140 on 06-01-2009 04:57 PM

    The native OS will use the password to lock the entire device.
    Yes, black pangolin appears to be the same as safebox. I don't know know about about Safebox or BlackPangolin to recommend it. I have not used it, and I have read show less than favorable reviews of it.
    1. If any post helps you please click the below the post(s) that helped you.
    2. Please resolve your thread by marking the post "Solution?" which solved it for you!
    3. Install free BlackBerry Protect today for backups of contacts and data.
    4. Guide to Unlocking your BlackBerry & Unlock Codes
    Join our BBM Channels (Beta)
    BlackBerry Support Forums Channel
    PIN: C0001B7B4   Display/Scan Bar Code
    Knowledge Base Updates
    PIN: C0005A9AA   Display/Scan Bar Code

  • I reced another E,mail asking to submit my private informations as below:

    I received another E.mail today asking to submit my private information as belows:
    From:
    "Yahoo! Customer Service" <[email protected]>
    Add sender to Contacts
    To:
    undisclosed-recipients
    Yahoo! Customer Care Satisfaction Survey
    This is for your own safety to avoid your account closed, you will have to verify your account by filling out your Login below by clicking the reply button. We apologies for any inconvenience.
    User name……………….....
    Password……………..........
    Date Of Birth………............
    Occupation.........................
    Country Of Residence……….
    After receiving the information requested you will be able to continue using your Account.We are really sorry for any inconvenience this might cause you.
    What can I do?
    In the October'2010 same E.mail was sent to me and I provided information on good faith . Consequently my PC was full of Trojan viruses.
    What to do next?

    I too have this problem and have gone through almost identical analysis.
    I get a mix of nothing happening and the message, operation not permitted from version of reader 6.0 through to 8.1

  • CVP Securing Private Data

    Can anyone provide tips, best practices, links to documents regarding security and securing private data when using CVP, VXML Server, Reporting Server, Nuance ASR, UCCE?
    I'm sure some folks have already implemented the solution in secure environments. Right???
    This is what I know can be done through Studio, I'm looking for more:
    1) Set 'Secure Logging' to True in the voice elements that collect input from callers.
    2) Ensure VXML Debug logs are turned off (duh!)
    3) Ensure that filters are set appropriately through the Ops Console so personal data is not sent to the Reporting Server
    4) PCI Compliance Link - http://www.cisco.com/en/US/netsol/ns625/index.html

    Hi Janine,
    Did you manage to get any details?
    Thanks!
    -JT-

  • Where is security relevent information such as Password for ITS are stored?

    where is security relevent information such as Password for ITS are stored?

    Single Sign-On with User ID and Password
    Purpose
    The Single Sign-On (SSO) mechanism with user name and password provides an alternative for applications that cannot accept and verify SAP logon tickets. With this SSO mechanism the Portal Server uses user mapping information provided by users or administrators to give the portal user access to external systems. The portal components connect to the external system with the user’s credentials.
    As the user's user ID and password are sent across the network, you should use a secure protocol such as Secure Sockets Layer (SSL) for sending data.
    Process Flow
    There are different procedures depending on the requirements.
    Single Sign-On to SAP Systems
    You can access SAP Systems that do not support SAP logon tickets via Single Sign-On with user ID and password. These are SAP Systems with release 3.1I. For more information, see Configuring SSO with User ID and Password to SAP Systems.
    Single Sign-On to non-SAP systems via a Java iView developed specifically for the customer
    The system must be defined in the system landscape. For details, see Creating Systems.
    The administrator or user must map user data to user data in the system. For more information, see User Mapping.
    The iView through which the user tries to access the system must be programmed to get the mapped user data from the data repository and write the user credentials (user ID and password) in a header field of the request. The system can then log on the user with these credentials. This can be done using the Java APIs provided with SAP Enterprise Portal.

  • There is a program unfortunately just called "Cookie" (so I can't be successful doing a search here) that is supposed to help protect our private information that resides on our computers.  Has anyone used this and is it worth buying?

    Unfortunately this discussion forum has changed and become confusing indeed.  It wanted me to put my entire question in a Subject box which wasn't labeled as such, and I find this strange.  Especially since now it tells me to repeat my question in this box, so here goes.
    Has anyone here used a program called 'Cookie' that is supposed to protect our private information from sites which could retrieve it when we surf the Net.  If so, do you consider the program worth buying?

    If you are referring to Cookie from SweetP Productions, I have tried it and not found it to work reliably, so I cannot recommend it. I've had the best results with the same company's free Safari Cookies, though it's not perfect (none of the cookie managers are, unfortunately):
    http://www.macupdate.com/app/mac/31018/safari-cookies
    Regards.

  • Security related information in SOAP thruough BPEL

    Hi all,
    How to pass the security related information in SOAP(UsernameToken) in BPEL
    thanks
    kalyan

    You can also add the username and password as properties to the invoke .
    open the bpel.xml of your bpel process and the below properties where your partner link is defined
    <property name="wsseHeaders">credentials</property>
    <property name="wsseUsername">YOUR USER</property>
    <property name="wssePassword">YOUR PASSWORD</property>
    As an example check this :
    <partnerLinkBinding name="PartnerLink_1">
    <property name="wsdlLocation">DMSBODServiceRef.wsdl</property>
    <property name="wsseHeaders">credentials</property>
    <property name="wsseUsername">marattu</property>
    <property name="wssePassword">wipro@143</property>
    </partnerLinkBinding>

  • ADSL Broadband with Secure private and Guest Open ...

    Hi
    Im thinking of signing up with BT for my business phone and broadband - not the cheapest (£55/month) but the one I feel comfortable with (for now).
    I shall need to have a private wi-fi network for my business computers but also a public (possibly open) wi-fi network for client use.
    Ive got a Home Hub 3 for my house but Im not overly impressed with it and dont know if that would give me what I need anyway?
    So, can anyone suggest a GOOD router which will connect with BT ASDL line, and give me 1 secure private wi-fi channel (plus ethernet connection) and at least 1 (maybe more) open wi-fi channels ?
    Im looking at upto £150 to spend on a piece of kit to do the job.
    I believe there is also some software which will allow me to set a "welcome page" on the open network(s) as well ?
    THANK YOU for any advice !

    Welcome to the BT Residential Customers forum
    You would be best asking for advice on the BT Business forums http://business.forums.bt.com/
    as there are probably plenty of people with a similar arrangement.
    Thanks
    There are some useful help pages here, for BT Broadband customers only, on my personal website.
    BT Broadband customers - help with broadband, WiFi, networking, e-mail and phones.

  • I want to know my security questions information?

    Hi i don't know my security questions information everything. it not match everything. i need you help my
    security questions information from my apple id. i use laptop Thank you

    You need to ask Apple to reset your security questions. To do this, click here and pick a method; if that page doesn't list one for your country or you're unable to call, fill out and submit this form.
    (126374)

  • I want to reset my security question information but I don't  receive any email

    I redeem a gift card. When I want to buy a application it asked me to answer to security questions. But I forgot my answers.
    Because of that I want to reset my security question information. It says me that email sent but I don't receive any email in my inbox.

    Hi atanamdar,
    Thanks for the question. If I understand correctly, you forgot the security answers and are not receiving the reset email. I would recommend that you read these articles, they may be helpful in troubleshooting your issue.
    If you forgot the answers to your Apple ID security questions - Apple Support
    If you didn't receive your Apple ID verification or reset email - Apple Support
    Thanks for using Apple Support Communities.
    Cheers,
    Mario

  • Secure PRIVATE Cloud Services

    Does anyone have any experience of integrating OS X and iOS devices with Secure Private Cloud Services. Please do not respond with any details about iCloud as this is a Public Cloud Service.

    Does anyone have any experience of integrating OS X and iOS devices with Secure Private Cloud Services. Please do not respond with any details about iCloud as this is a Public Cloud Service.

  • Misused my private information and charged me after cancellation -proof included

    Account #: 
    Wireless #: 
    Account name: Rupesh A[edited for privacy – please do not post personal information]
    I am a former AT&T customer and I had cancelled my line of service on March 9th 2011. My final bill was $181.93 and was credited on the same day. I was also assured that my personal information was secure with AT&T and will not be shared with anyone else.
    Please see attached email confirmation from Angel G[edited for privacy – please do not post personal information].
    On 8/5/2015, my wife received a call from a collection agency, Enhanced Recovery Company “ERC” (not sure how they got my wife’s number), regarding a debt collection for the amount of $30 as an outstanding AT&T bill. Initially, we thought it was a spam call as I was not an AT&T customer since 2011. So, immediately after my call with ERC, I placed a fraud alert with Equifax. However, when I checked my credit report on the same day I found out that I had a negative alert placed by ERC for an outstanding $30 with AT&T. According to ERC representative, Mary D (manager), AT&T sold this debt portfolio to ERC in Dec 2014. Based on this information, I immediately called AT&T customer at (800) 331 0500 around 8:12 pm on 8/15/2015. Upon explaining the situation and requesting for a reason on why I was charged $30 after my service was terminated with AT&T, the AT&T representative offered me to adjust the amount in my account. As I was not concerned about the amount rather I was worried about the false reporting to credit bureau, I requested to speak to her manager. While trying to explain my situation to the manager, he hung up on me. I was surprised and frustrated by this moment. I attempt to make another call and decided to voice record my conversation this time. My second call to AT&T customer service was made on 8:53 pm on 8/15/2015. The AT&T representative named Penny answered my call and surprisingly she refused to provide me any details which was provided to me earlier in my previous call. Upon request, the call was transferred to her manager, Phil, who at first advised me to talk to the collection agency as AT&T had already sold the debt portfolio. After multiple requests to Phil, he stated that the $30.00 was an outstanding 2 international airtime charges made on 2/24/2011 and 2/25/2011 and I can only settle the matter by calling collection agency.
    My questions to AT&T:
    The email confirms that I am not your customer since 3/9/2011 and the final bill of $181.93 was settled. Where did this $30 come from? Why was this not included in the final bill when the line of service was terminated?
    Why was there no mails, communication sent to me before the debt portfolio was sold to collection agency?
    There were no mails or any sort of communication from the collection agency before the case was reported to credit bureau. Why?
    I was assured that my personal information will not be shared with anyone. Yet, AT&T provided my personal details to third party.
    Now as per AT&T Wireless Customer Agreement:
    “"AT&T" or "we," "us," or "our" refers to AT&T Mobility LLC, acting on behalf of its FCC-licensed affiliates doing business as AT&T. "You" or "your" refers to the person or entity that is the customer of record.” – I was not your customer of record since 2011. The amount was billed after my termination of contract.
    Section 1.1 under Your Termination Rights, “After the first 14 days, you may terminate your Agreement for any reason. However, you agree to pay AT&T for all fees, charges, and other amounts incurred and owed under your Agreement along with the applicable ETF.” – I terminated my contract and line of service with AT&T because AT&T failed to protect consumer identity and issued a separate line under my SSN details. The email from Angel Gabaldon confirms that we agreed to settle the matter by crediting my final bill and there would be no ETF charges for the cancellation. The final bill was settled and the line of service (Acc# ) issued under my name was terminated. I was not even on a month-to-month agreement with AT&T. I was not bound by any of AT&T terms and condition since then.
    I am very disappointed to know that AT&T has failed for the second time to protect its customers privacy and reported false information that has damaged my credit history (leave alone the number of times me and wife have been harassed by debt collectors). I’ve read about your arbitration policy however, [Edited to comply with Guidelines]as this is now a repetitive occurrence. Please see my first email sent to you on 3/9/2011.  I believe this is a very serious issue and I am very concerned about my privacy matter. This is hampering my normal life now.
    Here’s the screenshot from my credit report.

    If you are concerned about publishing your personal information, why then did you publish it on a public, customer to customer help forum?   Moderators have edited it out for your privacy. If the debt isn't valid, dispute it with the collector, ATT no longer owns the debt and can't help you. Below is the portion of your terms of service, which you would have signed when you had service with ATT.  Please read......  1.7 What if I fail to pay my AT&T Bill when it is due?You agree that for each bill not paid in full by the due date, AT&T may charge and you will pay a late payment fee of $5. Restrictive endorsements are void.You expressly authorize, and specifically consent to allowing, AT&T and/or its outside collection agencies, outside counsel, or other agents to contact you in connection with any and all matters relating to unpaid past due charges billed by AT&T to you. You agree that, for attempts to collect unpaid past due charges, such contact may be made to any mailing address, telephone number, cellular phone number, e-mail address, or any other electronic address that you have provided, or may in the future provide, to AT&T. You agree and acknowledge that any e-mail address or any other electronic address that you provide to AT&T is your private address and is not accessible to unauthorized third parties. For attempts to collect unpaid charges, you agree that in addition to individual persons attempting to communicate directly with you, any type of contact described above may be made using, among other methods, pre-recorded or artificial voice messages delivered by an automatic telephone dialing system, pre-set e-mail messages delivered by an automatic e-mailing system, or any other pre-set electronic messages delivered by any other automatic electronic messaging system.

  • How secure is information that is submitted using adobe forms?

    I am using adobe forms to creat an online application for students.  How secure is the information submitted?

    All of the the communications with the server are protected with SSL (https). This FAQ explains in more detail:
    http://forums.adobe.com/docs/DOC-1384
    Randy

  • Security of information

    I have just had an email requesting me to verify my account detail as my account had been suspended. Unfortunately I supplied all my details including bank details from my card.
    Fortunately I noticed soon after this it was a Phishing email. So had to change my Apple ID password and also cancel my bank debit card. I only noticed that when I tried to use another link on the website it never had any live links, I then also noticed that in the web add it did not have the 'S' in HTPPS denoting it being a secure site. So I now look for this on all sites I enter any secure information.

    In order to register Your sun update connection proxy you need an internet connection( direct or via web proxy).
    At the moment of register your Sun update connection client you are not really running Sun update connection Proxy, i explain:
    In order to install the Sun Update connection proxy feature you first have to register via sconadm or via sun update manager, once you have registered your client then you can proceed and download the Sun update connection proxy feature. Once you have the Sun update connection proxy running, you dont need to register any other client.
    You only need an internet connection for the Sun update connection Proxy ( direct or via web proxy). Clients connecting to the Sun update connection Proxy don't need an internet connection at all, since they are getting the patches from the Sun update Connection proxy.

Maybe you are looking for