Function and Data Security Rules
Here are the function and data security rules for external bank accounts:
| User | Action | Function Security | Data Security | Intent |
|---|---|---|---|---|
| Supplier Internal User | Create / Update user (POST and PATCH) | Manage third-party bank account. |
1. PARTY_ID is NULL in PER_USERS table 2. Functional Privilege: Maintain Supplier, Maintain Supplier Site (for site level payee access) 3. SUPPLIER_LOCKED_FLAG column must be N 4. Account creation allowed only for when party has payee with PAYABLES_DISB payment function |
Supplier |
| Supplier Internal User | View user (GET) | View third-party bank account. |
1. PARTY_ID is NULL in PER_USERS table 2. Functional Privilege: Maintain Supplier, View Supplier, Maintain Supplier Site (for site level payee access), View Supplier Site (for site level payee access) 3. Account view allowed only for when party has payee with PAYABLES_DISB payment function |
Supplier |
| AR Customer Internal User | Create User (POST and PATCH) | Manage third-party bank account. |
1. PARTY_ID is NULL in PER_USERS table 2. Functional Privilege: Manage Customers 3. For the given party ID, the payee should have payment function CUSTOMER_PAYMENT |
Customer |
| Internal User | View User (GET) | View third-party bank account. |
1. PARTY_ID is NULL in PER_USERS table 2. Functional Privilege: Manage Customers 3. Account view allowed only for when party has payee with CUSTOMER_PAYMENT payment function |
Customer |
| Customer Refund Internal User | Create / Update user (POST and PATCH) | Manage third-party bank account. |
1. PARTY_ID is NULL in PER_USERS table 2. Functional Privilege: AR_CREATE_RECEIVABLES_REFUND_PRIV 3. For the given party ID, the payee should have payment function AR_CUSTOMER_REFUNDS |
Refund |
| Customer Refund Internal User | View user (GET) | View third-party bank account. |
1. PARTY_ID is NULL in PER_USERS table 2. Functional Privilege: View Supplier Site 3. Account view allowed only for when party has payee with AR_CUSTOMER_REFUNDS payment function |
Refund |
| Employee (Payroll) | Create user (POST and PATCH) | Manage third-party bank account. |
1. HCM Privilege: FNDDS__PAY_MANAGE_WORKER_BANK_ACCOUNT_DATA__PER_ALL_PEOPLE_F__PersonDPEO 2. Creation allowed only when payee has EMPLOYEE_EXP payment function |
Person |
| Employee (Payroll) | View user (POST and PATCH) | View third-party bank account. |
1. HCM Privilege: FNDDS__PAY_VIEW_WORKER_BANK_ACCOUNT_DATA__PER_ALL_PEOPLE_F__PersonDPEO 2. View allowed only when payee has EMPLOYEE_EXP payment function |
Person |
| Employee (EXM) | Create User (POST and PATCH) | Manage third-party bank account. |
1. Creation allowed only when payee has EMPLOYEE_EXP payment function 2. Creation allowed only for party ID of login user derived from PER_USERS table |
Employee |
| Employee (EXM) | View User (GET) | View third-party bank account. |
1. View allowed only when payee has EMPLOYEE_EXP payment function 2. View allowed only for party ID of login user derived from PER_USERS table |
Employee |
| CE BAT | Create User (POST and PATCH) | Manage third-party bank account. |
1. PARTY_ID is NULL in PER_USERS table 2. Functional Privilege: Maintain Bank Account Transfer 3. Account creation allowed only for when party has payee with CASH_PAYMENT payment function |
BAT |
| CE BAT | View User (GET) | View third-party bank account. |
1. PARTY_ID is NULL in PER_USERS table 2. Functional Privilege: View Bank Account Transfer 3. Account view allowed only for when party has payee with CASH_PAYMENT payment function |
BAT |
| CE AHP | Create User (POST and PATCH) | Manage third-party bank account. |
1. PARTY_ID is NULL in PER_USERS table 2. Functional Privilege: Maintain Ad Hoc Payments 3. Account creation allowed only for when party has payee with ADHOC_PAYMENT payment function |
Adhoc |
| CE AHP | View User (GET) | View third-party bank account. |
1. PARTY_ID is NULL in PER_USERS table 2. Functional Privilege: View Ad Hoc Payments 3. Account view allowed only for when party has payee with ADHOC_PAYMENT payment function |
Adhoc |
| AP OTP | Create User (POST and PATCH) | Manage third-party bank account. |
1. PARTY_ID is NULL in PER_USERS table 2. Functional Privilege: Import Payables Payment Request 3. Account creation allowed only for when party has payee with ONETIME_PAYMENT payment function |
Onetime |
| AP OTP | View User (GET) | View third-party bank account. |
1. PARTY_ID is NULL in PER_USERS table 2. Functional Privilege: Import Payables Payment Request 3. Account view allowed only for when party has payee with ONETIME_PAYMENT payment function |
Onetime |