1 Overview

This document addresses aspects of security that are mentioned in the Merchandising Cloud Services Security Guide and describes them in more detail as well as outlines how they are used in Merchandising’s Location Destination specifically.

Application Functional Security

Merchandising’s Location Destination functional security supports a role-based, declarative model where resources are protected by roles that are assigned to users. Roles are associated to one or more duties, which are logical groupings of privileges, which provide different access rights. In this manner, an application role becomes the container that grants permissions to its members to access the application tasks, screens and the functionality within.

Roles

Roles, also referred to as Job Roles, align with titles or jobs within a retailer's organization, such as a Application Administrator or Supply Chain Analyst. Roles are used to classify users based on job responsibilities and actions to be performed in the application. One or more duties as well as individual privileges, if desired, can be assigned to roles. When a user logs into the application, based on the roles assigned to the user, the system determines which privileges have been granted to the user and the system features are enabled accordingly.

Duties

Duties are tasks one must perform in the context of their job. Duties in Merchandising’s Location Destination are logical groupings of privileges or other duties that grant users access to a set of functionally related tasks within the solution.

Privileges

Privileges are used to grant permission to access links into workflows, screens, actions and in some cases specific fields within the application. Privileges that grant access to related functionality are grouped together into duties that permit a user to perform a complete task to fulfill responsibilities within the context of their job.

Data Filtering

The Oracle Retail Merchandising set of solutions offer an optional layer of data filtering in the solution user interface, which limits the data end users see based on levels in the merchandise and organizational hierarchies.

Data filtering in the Locations Destination is completely determined by the setup performed in Merchandising. Whether or not this is used in your environment, is controlled by a system option in the Merchandising solution, which is also where all the configuration for this functionality is managed.

This data level filtering is configured by assigning users to a data security group. The group then is assigned to levels of the merchandise and organizational hierarchy. All users within a group will have similar access to a particular section of the merchandise or organizational hierarchy. For example, a group may be defined for a particular division, giving users across application job roles, access to the departments, classes, subclasses, and items in that division.

All Merchandising users must be included in the user/group relationships configured in Merchandising so that they are able to access the data needed to perform their jobs. With data filtering enabled, users are only be able to work with items that are part of the merchandise hierarchy to which they have been given data filtering access. Similarly, users are only able to work with locations (or zones containing locations) that are part of the organizational hierarchy to which they have been given data filtering access.

To implement data filtering, see the Manage Data Filtering chapter in the Oracle Retail Merchandising Administration Guide.