Implementing Function Security
A "full access" responsibility with a menu that includes all the functions in an application is predefined for each Oracle Applications product. Some applications may provide additional predefined responsibilities that include a smaller set of functions (i.e., fewer forms and subfunctions).
As a System Administrator, you can restrict the functionality a responsibility provides by defining rules to exclude specific functions or menus of functions. In fact, we recommend that you use exclusion rules to customize a responsibility in preference to constructing a new menu hierarchy for that responsibility.
For example, suppose you want to customize a responsibility to restrict the functionality of a form included in that responsibility. First, you examine the predefined menus that group the subfunctions associated with that form. Then, using exclusion rules, you can restrict the form's functionality by excluding certain of the form's subfunctions from the responsibility.
If you cannot create the responsibility you need by applying exclusion rules, you may build a custom menu for that responsibility using predefined forms (i.e., form functions) and their associated menus of subfunctions. However, we recommend that you do not disassociate a form from its developer-defined menus of subfunctions.
Securing Functions Using Predefined Menus
Use the Responsibilities form to:
- Limit a predefined responsibility's functionality by excluding menus and functions from it.
- Define a new responsibility and assign a predefined menu to it. Customize the new responsibility's functionality by excluding menus and functions.
- By assigning the same menu hierarchy to different responsibilities and excluding different functions and menus, you can easily customize an application's functionality.
Securing Functions Using New Menus
Use the Menus form to define menus pointing to functions that you want to make available to a new responsibility.
- Use forms and their associated menus of subfunctions to define new menus.
Assign the menu structure to a new responsibility using the Responsibilities form.
- For that responsibility, tailor a form's functionality by excluding particular subfunctions.
- By excluding a subfunction executed from within a form, the functionality of that form can be varied from one responsibility to another.
- By applying exclusion rules to the predefined menus of subfunctions associated with a form, you can easily customize a form's functionality.
Excluding Functions from a Responsibility
A system administrator may exclude functions or menus from the menu structure assigned to a responsibility.
- When a menu is excluded, all of its menu entries, that is, all the functions and menus of functions that it selects, are excluded.
- When you exclude a function from a responsibility, all occurrences of that function throughout the responsibility's menu structure are excluded.
See Also
Overview of Function Security
Defining a New Menu Structure
Special Function for Oracle HRMS, Oracle Sales and Marketing
Summary of Function Security
Form Functions
Overview of Oracle Applications Security
