Search Results amw_security_utils_pvt




Overview
Explore in AI Chat

Overview

AMW_SECURITY_UTILS_PVT is a private PL/SQL package in the APPS schema that provides the low-level security plumbing for Oracle E-Business Suite's Application Management Workbench (AMW) functionality. The AMW module is associated with Oracle Applications Manager (OAM) and the Application Configuration / security management utilities used to define and administer role-based access within the EBS environment. As a "PVT" (private) classified package, it is not intended as a public integration API; instead, it serves as an internal utility layer consumed by higher-level public packages and by other AMW components.

The package encapsulates reusable primitives for managing grants, resolving party identity, and validating function-level access. By isolating this logic in a private utility package, Oracle keeps the public AMW_SECURITY_PUB interface stable while the internal mechanics of security propagation remain encapsulated and independently maintainable. The package is marked VALID in the ETRM repository for both the 12.1.1 and 12.2.2 releases, and depends on the SYS.STANDARD package and the APPS.FND_GLOBAL package.

Key Procedures and Functions

The documented package exposes five procedures/functions:

  • GIVE_DEPENDANT_GRANTS — Establishes grants for dependent security objects. It propagates grant records to dependents that inherit access when a parent security definition is applied.
  • UPDATE_DEPENDANT_GRANTS — Modifies existing dependent grant records, keeping inherited grants synchronized when a parent security configuration changes.
  • REVOKE_DEPENDANT_GRANTS — Removes dependent grants, ensuring that access is withdrawn consistently across all dependent objects when a parent grant is revoked.
  • GET_PARTY_ID — Resolves and returns a party identifier used by the security model to associate grants with the correct party or user context.
  • CHECK_FUNCTION — Validates whether a given function is accessible in the current security context, serving as a runtime authorization check.

No parameter lists are documented in the ETRM metadata; callers should consult the package specification in the database for exact signatures.

Tables Accessed

The package operates against several documented tables referenced through APPS synonyms:

  • AMW_SECURITY_ROLE_MAPPINGS — Stores the mapping between AMW security roles and their associated definitions; read during grant propagation and function checks.
  • FND_GRANTS — The core Oracle Foundation grants table; written and updated by the GIVE/UPDATE/REVOKE_DEPENDANT_GRANTS procedures.
  • FND_USER — Read to resolve the current or target user context used by GET_PARTY_ID and CHECK_FUNCTION.
  • PLITBLM — The PL/SQL integer table type used internally for bulk processing of identifiers during grant operations.

Usage Notes

Because AMW_SECURITY_UTILS_PVT is classified as a private package, it is invoked indirectly rather than called directly from forms or concurrent programs. The ETRM dependency listing shows it is referenced by AMW_SECURITY_PUB and AMW_RL_HIERARCHY_PKG, and it references itself (indicating internal recursion or shared helper calls). Custom code should avoid direct invocation of the private package and instead use AMW_SECURITY_PUB, which provides the supported public entry points. Where custom extensions must interact with AMW security, the recommended approach is to call the public wrapper, allowing Oracle to maintain the private implementation across patch cycles without breaking customizations.