Search Results check_open_action_assigned_to

Overview

PA_CI_SECURITY_PKG is a PL/SQL security enforcement package within the Oracle E-Business Suite Projects (PA) module, owned by the APPS schema. Its name reflects its role in the "CI" (Change Issue / Control Item) area of Oracle Project Management, where it centralizes authorization logic that determines whether a given user may view, create, update, reassign, or transition project control items and related actions. Rather than embedding security checks directly into each form or view, the package provides a single consolidated layer that other PL/SQL units and views call to validate access rights. This design ensures consistent enforcement of project-level, party-level, and role-based authorization rules across the Change Issue and Control Item feature set.

The package is classified under the ETRM API classification "OTHER" and is documented as VALID in both 12.1.1 and 12.2.2. It is heavily referenced across the Projects schema, indicating it sits at the core of the control item security model rather than serving a narrow, isolated purpose.

Key Procedures and Functions

The package exposes eighteen documented procedures and functions, organized around discrete authorization questions:

• Project and view access: CHECK_PROJ_AUTH_CI, CHECK_VIEW_ACCESS, and CHECK_VIEW_PROJECT validate whether a user is permitted to see a given change issue or project context.
• Update and mutation access: CHECK_UPDATE_ACCESS, CHECK_UPDATE_ACCESS1, and CHECK_UPDATABLE_COMMENT govern editing rights, including whether a comment may be modified.
• Workflow and lifecycle transitions: CHECK_CHANGE_OWNER_ACCESS, CHECK_CHANGE_STATUS_ACCESS, CHECK_HIGHLIGHT_ACCESS, and CHECK_IMPLEMENT_IMPACT_ACCESS control actions such as reassigning ownership, advancing status, highlighting, and implementing an impact.
• Control item ownership and creation: CHECK_ITEM_OWNER_PROJECT_AUTH, CHECK_CREATE_CI, CHECK_CREATE_ACTION, and CHECK_OPEN_ACTION_ASSIGNED_TO validate creation privileges and assignment eligibility.
• Responsibility resolution: IS_TO_OWNER_ALLOWED and GET_RESP_WITH_ACCESS identify permissible owners and return the responsibility under which a user holds access.

Each routine returns a boolean or derived indicator that callers use to gate subsequent processing.

Tables Accessed

The package reads from a set of Projects and control-item tables via APPS synonyms. PA_PROJECTS_ALL, PA_PROJECT_PARTIES, PA_PROJECT_STATUSES, and PA_PROJECT_TYPES_ALL supply the project definition, party assignments, status, and type context needed to evaluate authorization. PA_CI_ACTIONS, PA_CI_COMMENTS, PA_CI_TYPES_B, and PA_CI_TYPE_USAGE provide the change issue records, their comments, and the type definitions that drive behavior. PA_CONTROL_ITEMS, PA_DIST_LIST_ITEMS, and PA_OBJECT_DIST_LISTS support control item and distribution list resolution, while FND_APPLICATION supplies responsibility and application context. PLITBLM is a standard Oracle tool used for distinct list handling. Together, these tables let the package resolve who owns a project, who participates via project parties, and which actions are valid.

Usage Notes

PA_CI_SECURITY_PKG is invoked primarily by Projects forms in the Control Item and Change Issue user interfaces, and by the views PA_CI_LIST_V, PA_CI_SECURED_V, PA_CI_CRPRJ_LIST_V, and PA_RELATED_ITEMS_V, which embed its security predicates directly into their SQL. It is also consumed by the PL/SQL utilities and public/private APIs PA_CI_IMPACTS_UTIL, PA_CONTROL_API_PUB, PA_CONTROL_API_PVT, PA_CONTROL_ITEMS_PUB, and PA_CONTROL_ITEMS_UTILS, and is referenced by nine other packages in total. Because FND_GLOBAL is among its dependencies, it derives the current user and responsibility at runtime, meaning custom code should invoke it within a properly initialized EBS session rather than in isolation.