R12 - How to control a Button in OAF R12 Pages via Grants

Overview

The purpose of this document is to give a brief insight into OAF SPEL options and a
way to manage region elements with UMX (RBAC) functions.

Requirement

Enable / disable a single button (Create) within Supplier Tax region, to prevent users
from adding supplier sites.

1. Create a personalization and define a SPEL rule:

(M) Personalize Page > and then identify the line by expanding all and a full test
search.

Volker Eckardt, Oracle Corporation 20/11/2010

Decide about the personalization level, we take here the responsibility level and enter:

SPEL expression: ${oa.FunctionSecurity.XXPOS_ALLOW_SITE_CREA}

This means that this button becomes visible if this permission is set for this
responsibility, for all other responsibilities we won’t change the default.

When done, the button shall disappear immediately; we need to clear the cache in case
it does not react like expected (Use ‘Functional Administrator’ to clear the cache).

Now create a new permission with the same name as above:

(R) Application Administrator > (M) Security > Permissions > Create Permission

Leave object name and permission set empty. Apply the record and continue with a
permission set:

(R) Application Administrator > (M) Security > Permissions Set > Create Permission
Set.

Add here also the permission previously created.

Volker Eckardt, Oracle Corporation 20/11/2010

In the next step we link the responsibility to the permission set via grant:

(R) Application Administrator > (M) Security > Grants

Step 1:

Step 2 will be skipped automatically,

… continue with step 3

Volker Eckardt, Oracle Corporation 20/11/2010

Step 3: Choose the Permission set

Step 4: Review and submit

Now we can control the button via grant. My test case includes a test where I end date
the grant, in this case the button shall also disappear.

Notes:
• Although we have used 3 more objects than generally needed, this way we can
control the application behavior and implement the role concept (the RBAC
concept).
• Generally a permission set can hold multiple permissions, not just one like in
my example.

Oracle Corporation
Email: volker.eckardt@oracle.com
Linkedin: http://de.linkedin.com/pub/volker-eckardt/0/8a7/430

Volker Eckardt, Oracle Corporation 20/11/2010

Volker Eckardt, Oracle Corporation 20/11/2010