Oracle Pedigree and Serialization Manager Security Guide Release 1.2 Part Number E48145-01 | Contents | Previous | Next |
This chapter covers the following topics:
Oracle Pedigree and Serialization Manager (OPSM) leverages the Oracle Fusion Middleware Security features to offer:
Authentication - ensuring that only authorized individuals get access to the system and data.
Authorization - access control to system privileges and data. This builds on authentication to ensure that individuals only get appropriate access.
OPSM can be configured to use Secure Sockets Layer (SSL), a security protocol that allows a client program (for example, web browser) to talk to a server program (for example, web server) over an encrypted link. Oracle Web Services Manager security policies also provides additional security for web services.
Oracle Pedigree and Serialization Manager (OPSM) provides functional security. Functional security is a statement of what you can do. It typically mirrors what you would see on a job description. For example, a Supply Chain Application Administrator is responsible for creating and maintaining the system setup for OPSM such as, definitions of locations, serial types, serial destinations, and system parameters.
The following table lists all of the default Oracle Database users that OPSM creates during install and are required for the application to work correctly.
Database User ID | Roles and System Privileges |
---|---|
FUSION_ATGLITE | GRANT "RESOURCE" TO FUSION_ATGLITE GRANT "CONNECT" TO FUSION_ATGLITE GRANT "CTXAPP" TO FUSION_ATGLITE GRANT "JAVAUSERPRIV" TO FUSION_ATGLITE GRANT "AQ_USER_ROLE" TO FUSION_ATGLITE ALTER USER "FUSION_ATGLITE" DEFAULT ROLE ALL GRANT CREATE SYNONYM TO FUSION_ATGLITE GRANT ALTER ANY MATERIALIZED VIEW TO FUSION_ATGLITE GRANT ALTER SESSION TO FUSION_ATGLITE GRANT ANALYZE ANY TO FUSION_ATGLITE GRANT CHANGE NOTIFICATION TO FUSION_ATGLITE GRANT CREATE ANY CONTEXT TO FUSION_ATGLITE GRANT CREATE ANY DIRECTORY TO FUSION_ATGLITE GRANT CREATE ANY JOB TO FUSION_ATGLITE GRANT CREATE DATABASE LINK TO FUSION_ATGLITE GRANT CREATE EXTERNAL JOB TO FUSION_ATGLITE GRANT CREATE JOB TO FUSION_ATGLITE GRANT CREATE MATERIALIZED VIEW TO FUSION_ATGLITE GRANT CREATE MINING MODEL TO FUSION_ATGLITE GRANT CREATE PROCEDURE TO FUSION_ATGLITE GRANT CREATE PUBLIC DATABASE LINK TO FUSION_ATGLITE GRANT CREATE PUBLIC SYNONYM TO FUSION_ATGLITE GRANT CREATE SEQUENCE TO FUSION_ATGLITE GRANT CREATE SESSION TO FUSION_ATGLITE GRANT CREATE SYNONYM TO FUSION_ATGLITE GRANT CREATE TABLE TO FUSION_ATGLITE GRANT CREATE TRIGGER TO FUSION_ATGLITE GRANT CREATE TYPE TO FUSION_ATGLITE GRANT CREATE VIEW TO FUSION_ATGLITE GRANT DROP ANY CONTEXT TO FUSION_ATGLITE GRANT DROP ANY DIRECTORY TO FUSION_ATGLITE GRANT DROP PUBLIC SYNONYM TO FUSION_ATGLITE GRANT UNLIMITED TABLESPACE TO FUSION_ATGLITE |
PAS | GRANT RESOURCE TO PAS GRANT CONNECT TO PAS GRANT CHANGE NOTIFICATION TO PAS GRANT CREATE VIEW TO PAS GRANT UNLIMITED TABLESPACE TO PAS GRANT CREATE MATERIALIZED VIEW TO PAS GRANT EXECUTE ON DBMS_CRYPTO TO PAS GRANT EXECUTE ON UTL_SMTP TO PAS GRANT CREATE JOB TO PAS GRANT CREATE ANY DIRECTORY TO PAS GRANT CREATE TABLE TO PAS GRANT CREATE SYNONYM TO PAS GRANT CREATE DATABASE LINK TO PAS |
PASJMS | GRANT RESOURCE TO PASJMS GRANT CONNECT TO PASJMS GRANT UNLIMITED TABLESPACE TO PASJMS |
A job is the actual job description such as, what you would view on a job board. Duties are the tasks that the job owner performs. Application roles are collections of duties that job owners perform. Only application roles may be the beneficiary of a permission grant. For example:
Job: Individual responsible for supply chain application administration. Collaborates with supply chain application users to maintain consistent application setup, rules, and access.
Duties: Manage Pedigree and Serialization System Setup, Serial Destinations, and Product Synchronization.
Job Role: Supply Chain Application Administrator.
All users are assigned specific roles that allow them to perform only those tasks that are appropriate to their job. This provides security as only users that are assigned certain roles are allowed to perform certain tasks and to access certain data. Administrators can create roles and users as needed.
Note: All job roles must be suffixed with "_Job, for example, Supply_Chain_Application_Administrator_Job
Each Job Role has Duty roles that are associated to it; each Duty Role has Privileges associated with it. Access to functionality is determined by the Duty Role and Privilege. For example:
Job Role | Duty Role | Privilege |
---|---|---|
Inventory Control Manager | Manage Product Lot for Pedigree and Serialization Duty |
|
Product Data Steward | Manage Product for Pedigree and Serialization Duty |
|
The following roles are seeded in Oracle Pedigree and Serialization Manager (OPSM):
Note: Administrators can view the job role code when they create users in LDAP.
Application Implementation Consultant
Industry Description: Individual responsible for enterprise-wide implementation of applications. Collaborates with specific application administrators to implement consistent enterprise application setup, architecture, information, rules, and access. This role has access to all setup tasks across products. It inherits all family level setups administrator job roles.
Job Role Code: ASM_APPLICATION_IMPLEMENTATION_CONSULTANT_JOB
Duty Roles:
This Duty Role... | Has Access to this Functionality (Privilege) |
---|---|
Manage Audit History for Pedigree and Serialization Duty | View Audit History for Pedigree and Serialization |
Manage Audit Setup for Pedigree and Serialization Duty | Edit Audit Setup for Pedigree and Serialization |
Manage Location for Pedigree and Serialization Duty |
|
Manage Pedigree and Serialization System Setup Duty |
|
Manage Product for Pedigree and Serialization Duty |
|
Manage Serial Destination for Pedigree and Serialization Duty |
|
Synchronize Product for Pedigree and Serialization Duty |
|
Synchronize Product Lot for Pedigree and Serialization Duty | Perform Product Lot Synchronization for Pedigree and Serialization |
Synchronize Product via Web Service for Pedigree and Serialization Duty | Perform Product Synchronization for Pedigree and Serialization via Web Service |
View Dashboard Work Area for Pedigree and Serialization Duty | View Dashboard Work Area for Pedigree and Serialization |
View Location Contact for Pedigree and Serialization Duty | View Location Contact for Pedigree and Serialization |
View Serials Work Area for Pedigree and Serialization Duty | View Serials Work Area for Pedigree and Serialization |
View System Setup Work Area for Pedigree and Serialization Duty | View System Setup Work Area for Pedigree and Serialization |
View Transactions Work Area for Pedigree and Serialization Duty | View Transactions Work Area for Pedigree and Serialization |
View Web Service Exceptions for Pedigree and Serialization Duty | View Web Service Exceptions for Pedigree and Serialization |
Industry Description: Individual responsible for reviewing compliance programs such as, Sarbanes-Oxley (SOX), enterprise risk management (ERM), operational risk, incident management, and so on, and analyzing performance evidence to determine an organization's compliance with legislative or industry mandates as well as internal policies.
Job Role Code: EDR_COMPLIANCE_BUSINESS_ANALYST_JOB
Duty Roles:
This Duty Role... | Has Access to this Functionality (Privilege) |
---|---|
Capture Events for Pedigree and Serialization Manager Duty | Capture Events for Pedigree and Serialization Manager |
Create Job Instance Web Service for Pedigree and Serialization Duty | Create Job Instance Web Service for Pedigree and Serialization |
Create Serial Generation Request Web Service for Pedigree and Serialization Duty | Create Serial Generation Request Web Service for Pedigree and Serialization |
Create Transaction Web Service for Pedigree and Serialization Duty |
|
Generate Serial Transaction for Pedigree and Serialization Duty |
|
Import Serial Transaction Exception for Pedigree and Serialization Duty |
|
Import Serial Transaction for Pedigree and Serialization Duty |
|
Manage Audit History for Pedigree and Serialization Duty | View Audit History for Pedigree and Serialization |
Manage Location for Pedigree and Serialization Duty |
|
Manage Packaging Hierarchy for Pedigree and Serialization Duty |
|
Manage Packaging Hierarchy Web Service for Pedigree and Serialization Duty |
|
Manage Product Return Exception for Pedigree and Serialization Duty |
|
Manage Product Return Transaction for Pedigree and Serialization Duty |
|
Manage Product Shipment Exception for Pedigree and Serialization Duty |
|
Manage Product Shipment Transaction for Pedigree and Serialization Duty |
|
Manage Serial Destination for Pedigree and Serialization Duty |
|
Manage Serial for Pedigree and Serialization Duty |
|
Manage Serial Range for Pedigree and Serialization Duty |
|
Manage Serial Transmission Exception for Pedigree and Serialization Duty |
|
Manage Serial Transmission Transaction for Pedigree and Serialization Duty |
|
Manage Serial Transmission Transaction Web Service for Pedigree and Serialization Duty | Transmit Serials Web Service for Pedigree and Serialization Manager |
Manage Serial Web Service for Pedigree and Serialization Duty |
|
Process Serial Generation Request Web Service for Pedigree and Serialization Duty | Process Serial Generation Request Web Service for Pedigree and Serialization |
Process Transaction Web Service for Pedigree and Serialization Duty | Process Transaction Web Service for Pedigree and Serialization |
Query Events for Pedigree and Serialization Manager Duty | Query Events for Pedigree and Serialization Manager |
Recommission Serial for Pedigree and Serialization Duty | Perform Serial Recommission for Pedigree and Serialization |
View Dashboard Work Area for Pedigree and Serialization Duty | View Dashboard Work Area for Pedigree and Serialization |
View Packaging Hierarchy Work Area for Pedigree and Serialization Duty | View Packaging Hierarchy Work Area for Pedigree and Serialization |
View Serials Work Area for Pedigree and Serialization Duty | View Serials Work Area for Pedigree and Serialization |
View System Setup Work Area for Pedigree and Serialization Duty | View System Setup Work Area for Pedigree and Serialization |
View Transactions Work Area for Pedigree and Serialization Duty | View Transactions Work Area for Pedigree and Serialization |
Work Order Serialization for Pedigree and Serialization Duty |
|
Industry Description: Individual responsible for overseeing the process whereby the company knows where everything is located at all times and efficiently moves inventory from one station to another as needed.
Job Role Code: INV_INVENTORY_CONTROL_MANAGER_JOB
Duty Roles:
This Duty Role... | Has Access to this Functionality (Privilege) |
---|---|
Create Job Instance Web Service for Pedigree and Serialization Duty | Create Job Instance Web Service for Pedigree and Serialization |
Manage Product Lot for Pedigree and Serialization Duty |
|
Merge Product Lot Web Service for Pedigree and Serialization Duty | Merge Product Lot Web Service for Pedigree and Serialization |
View Dashboard Work Area for Pedigree and Serialization Duty | View Dashboard Work Area for Pedigree and Serialization |
View Product Lot Work Area for Pedigree and Serialization | View Product Lot Work Area for Pedigree and Serialization |
View Serials Work Area for Pedigree and Serialization Duty | View Serials Work Area for Pedigree and Serialization |
Industry Description: Individual responsible for managing and maintaining product data quality and integrity.
Job Role Code: EGI_PRODUCT_DATA_STEWARD_JOB
Duty Roles:
This Duty Role... | Has Access to this Functionality (Privilege) |
---|---|
Manage Product for Pedigree and Serialization Duty |
|
View Dashboard Work Area for Pedigree and Serialization Duty | View Dashboard Work Area for Pedigree and Serialization |
View System Setup Work Area for Pedigree and Serialization Duty | View System Setup Work Area for Pedigree and Serialization |
Industry Description: Individual responsible for directing production operations and processes for a plant, division, or company, including production scheduling, staffing, equipment, quality control, inventory control, and the coordination of production activities with those of other departments; measures progress by established standards of performance.
Job Role Code: WIP_PRODUCTION_MANAGER_JOB
Duty Roles:
This Duty Role... | Has Access to this Functionality (Privilege) |
---|---|
Create Serial Generation Request Web Service for Pedigree and Serialization Duty | Create Serial Generation Request Web Service for Pedigree and Serialization |
Create Transaction Web Service for Pedigree and Serialization Duty | Create Transaction Web Service for Pedigree and Serialization |
Generate Serial Transaction for Pedigree and Serialization Duty |
|
Import Serial Transaction Exception for Pedigree and Serialization Duty |
|
Import Serial Transaction for Pedigree and Serialization Duty |
|
Manage Packaging Hierarchy for Pedigree and Serialization Duty |
|
Manage Packaging Hierarchy Web Service for Pedigree and Serialization Duty |
|
Manage Serial for Pedigree and Serialization Duty |
|
Manage Serial Transmission Exception for Pedigree and Serialization Duty |
|
Manage Serial Transmission Transaction for Pedigree and Serialization Duty |
|
Manage Serial Web Service for Pedigree and Serialization Duty |
|
Process Serial Generation Request Web Service for Pedigree and Serialization Duty | Process Serial Generation Request Web Service for Pedigree and Serialization |
Process Transaction via Web Service for Pedigree and Serialization Duty | Process Transaction via Web Service for Pedigree and Serialization |
View Dashboard Work Area for Pedigree and Serialization Duty | View Dashboard Work Area for Pedigree and Serialization |
View Packaging Work Area for Pedigree and Serialization Duty | View Packaging Work Area for Pedigree and Serialization |
View Serial Destination for Pedigree and Serialization Duty | View Serial Destination for Pedigree and Serialization |
View Serial Range for Pedigree and Serialization Duty | View Serial Range for Pedigree and Serialization |
View Serial Work Area for Pedigree and Serialization Duty | View Serial Work Area for Pedigree and Serialization |
View System Setup Work Area for Pedigree and Serialization Duty | View System Setup Work Area for Pedigree and Serialization |
View Transactions Work Area for Pedigree and Serialization Duty | View Transactions Work Area for Pedigree and Serialization |
Work Order Serialization for Pedigree and Serialization Duty |
|
Industry Description: A worker directly engaged in production, including fabrication, machining, assembly, finishing, and related activities.
Job Role Code: WIP_PRODUCTION_WORKER_JOB
Duty Roles:
This Duty Role... | Has Access to this Functionality (Privilege) |
---|---|
Create Serial Generation Request Web Service for Pedigree and Serialization Duty | Create Serial Generation Request Web Service for Pedigree and Serialization |
Generate Serial Transaction for Pedigree and Serialization Duty |
|
Manage Packaging Hierarchy for Pedigree and Serialization Duty |
|
Manage Packaging Hierarchy Web Service for Pedigree and Serialization Duty |
|
Manage Serial for Pedigree and Serialization Duty |
|
Manage Serial Web Service for Pedigree and Serialization Duty |
|
Process Serial Generation Request Web Service for Pedigree and Serialization Duty | Process Serial Generation Request Web Service for Pedigree and Serialization |
View Dashboard Work Area for Pedigree and Serialization Duty | View Dashboard Work Area for Pedigree and Serialization |
View Packaging Work Area for Pedigree and Serialization Duty | View Packaging Work Area for Pedigree and Serialization |
View Serial Work Area for Pedigree and Serialization Duty | View Serial Work Area for Pedigree and Serialization |
View System Setup Work Area for Pedigree and Serialization Duty | View System Setup Work Area for Pedigree and Serialization |
View Transactions Work Area for Pedigree and Serialization Duty | View Transactions Work Area for Pedigree and Serialization |
Industry Description: Individual responsible for material control of all products delivered to the business from suppliers.
Job Role Code: RCV_RECEIVING_AGENT_JOB
Duty Roles:
This Duty Role... | Has Access to this Functionality (Privilege) |
---|---|
Create Transaction Web Service for Pedigree and Serialization Duty | Create Transaction Web Service for Pedigree and Serialization |
Manage Product Return Transaction for Pedigree and Serialization Duty |
|
Manage Serial Transmission Transaction for Pedigree and Serialization Duty |
|
Process Transaction via Web Service for Pedigree and Serialization Duty | Process Transaction via Web Service for Pedigree and Serialization |
View Dashboard Work Area for Pedigree and Serialization Duty | View Dashboard Work Area for Pedigree and Serialization |
View Transactions Work Area for Pedigree and Serialization Duty | View Transactions Work Area for Pedigree and Serialization |
Receiving and Inspection Manager
Industry Description: Individual responsible for the receipt and inspection of incoming materials, parts or products; obtains, verifies and submits receiving documents and information for matching against invoices; controls assets and inventory until delivered to and accepted by procuring parties; arranges for return of refused receipts; plans, organizes and coordinates the receiving department.
Job Role Code: RCV_RECEIVING_AND_INSPECTION_MANAGER_JOB
Duty Roles:
This Duty Role... | Has Access to this Functionality (Privilege) |
---|---|
Create Transaction Web Service for Pedigree and Serialization Duty | Create Transaction Web Service for Pedigree and Serialization |
Manage Product Return Exception for Pedigree and Serialization Duty |
|
Manage Product Return Transaction for Pedigree and Serialization Duty |
|
Manage Serial Transmission Exception for Pedigree and Serialization Duty |
|
Manage Serial Transmission Transaction for Pedigree and Serialization Duty |
|
Process Transaction via Web Service for Pedigree and Serialization Duty | Process Transaction via Web Service for Pedigree and Serialization |
View Dashboard Work Area for Pedigree and Serialization Duty | View Dashboard Work Area for Pedigree and Serialization |
View Serial Destination for Pedigree and Serialization Duty | View Serial Destination for Pedigree and Serialization |
View System Setup Work Area for Pedigree and Serialization Duty | View System Setup Work Area for Pedigree and Serialization |
View Transactions Work Area for Pedigree and Serialization Duty | View Transactions Work Area for Pedigree and Serialization |
Industry Description: Individual responsible for material control of all products delivered to the business from suppliers.
Job Role Code: WSH_SHIPPING_AGENT_JOB
Duty Roles:
This Duty Role... | Has Access to this Functionality (Privilege) |
---|---|
Create Transaction Web Service for Pedigree and Serialization Duty | Create Transaction Web Service for Pedigree and Serialization |
Manage Product Shipment Transaction for Pedigree and Serialization Duty |
|
Manage Serial Transmission Transaction for Pedigree and Serialization Duty |
|
Process Transaction via Web Service for Pedigree and Serialization Duty | Process Transaction via Web Service for Pedigree and Serialization |
View Dashboard Work Area for Pedigree and Serialization Duty | View Dashboard Work Area for Pedigree and Serialization |
View Transactions Work Area for Pedigree and Serialization Duty | View Transactions Work Area for Pedigree and Serialization |
Industry Description: Individual responsible for the shipment of outgoing materials, parts or products; ensures order accuracy and improves production standards; oversees stock placement, warehouse space utilization, and changes that effect loading time; ensures warehouse drawings and floor plan layouts are maintained and updated as changes occur; manages safety programs for all operations in accordance with applicable safety and OSHA regulations; develops, submits, and controls annual shipping budget; monitors and controls operator staffing and workload; reviews all customer loading requirements and ensures compliance; investigates and responds to customer complaints.
Job Role Code: WSH_SHIPPING_MANAGER_JOB
Duty Roles:
This Duty Role... | Has Access to this Functionality (Privilege) |
---|---|
Create Transaction Web Service for Pedigree and Serialization Duty | Create Transaction Web Service for Pedigree and Serialization |
Digitally Sign Shipments Duty | Digitally Sign Shipments |
Manage Product Shipment Exception for Pedigree and Serialization Duty |
|
Manage Product Shipment Transaction for Pedigree and Serialization Duty |
|
Manage Serial Transmission Exception for Pedigree and Serialization Duty |
|
Manage Serial Transmission Transaction for Pedigree and Serialization Duty |
|
Process Transaction via Web Service for Pedigree and Serialization Duty | Process Transaction via Web Service for Pedigree and Serialization |
View Dashboard Work Area for Pedigree and Serialization Duty | View Dashboard Work Area for Pedigree and Serialization |
View Serial Destination for Pedigree and Serialization Duty | View Serial Destination for Pedigree and Serialization |
View System Setup Work Area for Pedigree and Serialization Duty | View System Setup Work Area for Pedigree and Serialization |
View Transactions Work Area for Pedigree and Serialization Duty | View Transactions Work Area for Pedigree and Serialization |
Supply Chain Application Administrator
Industry Description: Individual responsible for the performance of recurring operational tasks related to the support of an enterprise infrastructure.
Job Role Code: RCS_SUPPLY_CHAIN_APPLICATION_ADMINISTRATOR_JOB
Duty Roles:
This Duty Role... | Has Access to this Functionality (Privilege) |
---|---|
Manage Audit History for Pedigree and Serialization Duty | View Audit History for Pedigree and Serialization |
Manage Audit Setup for Pedigree and Serialization Duty | Edit Audit Setup for Pedigree and Serialization |
Manage EPCIS System Setup Duty |
|
Manage Location for Pedigree and Serialization Duty |
|
Manage Pedigree and Serialization System Setup Duty |
|
Manage Serial Destination for Pedigree and Serialization Duty |
|
Synchronize Product for Pedigree and Serialization Duty |
|
Synchronize Product Lot for Pedigree and Serialization Duty | Perform Product Lot Synchronization for Pedigree and Serialization |
Synchronize Product via Web Service for Pedigree and Serialization Duty | Perform Product Synchronization for Pedigree and Serialization via Web Service |
View Dashboard Work Area for Pedigree and Serialization Duty | View Dashboard Work Area for Pedigree and Serialization |
View Location Contact for Pedigree and Serialization Duty | View Location Contact for Pedigree and Serialization |
View Serials Work Area for Pedigree and Serialization Duty | View Serials Work Area for Pedigree and Serialization |
View System Setup Work Area for Pedigree and Serialization Duty | View System Setup Work Area for Pedigree and Serialization |
View Transactions Work Area for Pedigree and Serialization Duty | View Transactions Work Area for Pedigree and Serialization |
View Web Service Exceptions for Pedigree and Serialization Duty | View Web Service Exceptions for Pedigree and Serialization |
Industry Description: Manages the supply and demand for products in the warehouse and ensures the smooth flow of product through the fulfillment cycle. This user could benefit from information from the system to be alerted when demand is "stuck" and not moving because of a) short supply or b) inefficiencies in the pick, pack, and shipping process. This users also has a forecasted or target shipment revenue to attain, and needs to be alerted when this target is in danger of not being met so that corrective action can be taken. Ultimately, this individual helps create customer satisfaction by ensuring smooth operation of the supply chain.
Job Role Code: INV_WAREHOUSE_MANAGER_JOB
Duty Roles:
This Duty Role... | Has Access to this Functionality (Privilege) |
---|---|
Manage Packaging Hierarchy for Pedigree and Serialization Duty |
|
Manage Packaging Hierarchy Web Service for Pedigree and Serialization Duty |
|
Manage Serial for Pedigree and Serialization Duty |
|
Manage Serial Web Service for Pedigree and Serialization Duty |
|
View Dashboard Work Area for Pedigree and Serialization Duty | View Dashboard Work Area for Pedigree and Serialization |
View Packaging Work Area for Pedigree and Serialization Duty | View Packaging Work Area for Pedigree and Serialization |
View Serials Work Area for Pedigree and Serialization Duty | View Serials Work Area for Pedigree and Serialization |
Industry Description: Move material within the warehouse including putting material away to stock, cross docking, picking material, consolidating picked material, labeling product or packages, replenishing, cycle counting, and performing physical inventories. Moving the material may require heavy lifting and equipment to handle the material such as, forklifts.
Job Role Code: INV_WAREHOUSE_OPERATOR_JOB
Duty Roles:
This Duty Role... | Has Access to this Functionality (Privilege) |
---|---|
Manage Packaging Hierarchy for Pedigree and Serialization Duty |
|
Manage Packaging Hierarchy Web Service for Pedigree and Serialization Duty |
|
View Dashboard Work Area for Pedigree and Serialization Duty | View Dashboard Work Area for Pedigree and Serialization |
View Packaging Work Area for Pedigree and Serialization Duty | View Packaging Work Area for Pedigree and Serialization |
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.