Search Results jtf_dac_role_perms




Overview

The JTF_DAC_ROLE_PERMS table is a core data object within the Oracle E-Business Suite CRM Foundation (JTF) module, specifically supporting the Data Access Control (DAC) security model. Its primary function is to define the foundational associations between security roles and specific permissions within the application. This mapping establishes which actions or data access rights are granted to a given role. The official documentation explicitly advises "Do not use," indicating this is a seeded, internal repository table. Direct data manipulation is unsupported; access should be managed through the appropriate administrative APIs and user interfaces provided by the Oracle CRM Foundation.

Key Information Stored

The table stores the unique relationships that form the basis of the DAC permission framework. The critical columns are the primary and unique key constituents. The ROLE_PERM_ID column serves as the system-generated, unique primary key identifier for each role-permission association record. The ROLE_ID column holds the identifier for a security role, as defined in the JTF security model. The PERMISSION_ID column stores the identifier for a specific system permission. The combination of ROLE_ID and PERMISSION_ID is enforced as a unique constraint (JTF_DAC_ROLE_PERMS_UK1), preventing duplicate assignments of the same permission to the same role.

Common Use Cases and Queries

Direct queries against this table are typically for diagnostic or audit purposes by system administrators, given its internal status. A common scenario is investigating the complete set of permissions assigned to a specific role to troubleshoot access issues. A sample query would join to role and permission descriptive tables (not provided in the metadata but commonly named JTF_DAC_ROLES and JTF_DAC_PERMISSIONS) for readability. Another use case is verifying the existence of a specific permission grant before attempting to modify it via the official API.

  • Identifying permissions for a role: SELECT r.ROLE_NAME, p.PERMISSION_NAME FROM JTF_DAC_ROLE_PERMS rp, JTF_DAC_ROLES r, JTF_DAC_PERMISSIONS p WHERE rp.ROLE_ID = r.ROLE_ID AND rp.PERMISSION_ID = p.PERMISSION_ID AND r.ROLE_NAME = '&ROLE_NAME';
  • Finding the ROLE_PERM_ID for a specific association: SELECT ROLE_PERM_ID FROM JTF_DAC_ROLE_PERMS WHERE ROLE_ID = &ROLE_ID_VALUE AND PERMISSION_ID = &PERM_ID_VALUE;

Related Objects

JTF_DAC_ROLE_PERMS is a central reference point for more granular DAC components, as evidenced by its foreign key relationships. It is the parent table for criteria definitions that further refine a permission. The documented foreign key relationships are:

  • JTF_DAC_CRITERIA: References JTF_DAC_ROLE_PERMS via the JTF_DAC_CRITERIA.ROLE_PERM_ID column. This table stores detailed access rules (criteria) scoped to a specific role-permission association.
  • JTF_DAC_ROLE_PERM_CRIT: References JTF_DAC_ROLE_PERMS via the JTF_DAC_ROLE_PERM_CRIT.ROLE_PERM_ID column. This table manages the assignment of predefined criteria sets to a role-permission link.

These relationships illustrate that a record in JTF_DAC_ROLE_PERMS can have multiple, associated criteria records that define the precise conditions under which the granted permission is active.