[Home] [Help]
261: -- this from picking up static user lists.
262: --
263: cursor get_people(p_security_profile_id number) is
264: select person_id
265: from per_person_list
266: where security_profile_id=p_security_profile_id
267: and granted_user_id is null;
268:
269: --
294: where trunc(sysdate) between a.effective_start_date
295: and a.effective_end_date
296: and assignment_type <> 'B') asg
297: where exists (select null
298: from per_person_list ppl
299: where ppl.security_profile_id=p_security_profile_id
300: and ppl.person_id=asg.person_id)
301: connect by asg.supervisor_id = prior asg.person_id
302: and Level<=nvl(p_max_levels,Level)+1
327: and a.effective_end_date
328: and assignment_type <> 'B'
329: and a.primary_flag='Y' ) asg
330: where exists (select null
331: from per_person_list ppl
332: where ppl.security_profile_id=p_security_profile_id
333: and ppl.person_id=asg.person_id)
334: connect by asg.supervisor_id = prior asg.person_id
335: and Level<=nvl(p_max_levels,Level)+1
474: and g_context.view_all_payrolls_flag='Y'
475: and g_context.custom_restriction_flag='N' then
476: --
477: -- we are only restricting by supervisor so do not
478: -- join to per_person_list
479: --
480: if g_context.exclude_secondary_asgs_flag='Y' then
481: --
482: -- find all of the people who are in the supervisor hierarchy of
506: -- org, pos and custom security is not in use and (bug 3507431)
507: -- the security is not on an individual assignment level.
508: --
509: -- we are also restricting by another thing, so join to
510: -- per_person_list
511: --
512: if g_context.exclude_secondary_asgs_flag='Y' then
513: --
514: -- find all of the people who are in the supervisor hierarchy of
535: end if;
536: end if;
537:
538: --
539: -- The static per_person_list is now cached during evaluate_access
540: -- so this code can be commented out. Although this is cached
541: -- into a separate table and synched up at the moment, it is
542: -- expected that g_person_list can be obsoleted and replaced by
543: -- g_per_tbl.
546: --
547: -- Bug 2807573 DK 17-FEB-2003
548: --
549: -- For a view all security profile we don't need to get
550: -- the per_person_list. It should be empty for such a profile
551: -- but checking involves a range scan and hence unnecessary i/o.
552: --
553: IF ( g_context.view_all_flag = 'N' ) THEN
554:
567: -- orgs, positions, people, etc.
568: --
569: -- Where user-based security or assignment-level security is used,
570: -- the security is dynamically assessed, otherwise it picks up
571: -- the permissions from per_person_list.
572: --
573: -- hr_security_internal.evaluate_access keeps a separate person
574: -- cache at the moment, although it is expected that g_person_list
575: -- can be completely replaced by g_per_tbl in the near future
605: --
606: -- add granted users if using a restricted profile.
607: -- A user can have been granted access to a person but still be using
608: -- a view all responsiblity. In which case there will be rows in
609: -- PER_PERSON_LIST but as this is a view all profile we can ignore them.
610: --
611: -- 2807573 21-FEB-2003
612: -- Only deal with grant access when using a restricted profile.
613: --
1095:
1096: -- A condition with view_all_contacts_flag = All and
1097: -- view_all_candidates_flag = None, will not be taken care in below
1098: -- IF condition. ie: in such a scenario, its been decided that contacts
1099: -- will be populated in per_person_list through PERSLM. Thereby this
1100: -- function (SHOW_PERSON) will return a TRUE through CHECK_PERSON_LIST.
1101:
1102: -- Contacts Candidates Contacts cached
1103: -- ------------------------------------------