Search Results check_party_privilege

Overview

APPS.EGO_SECURITY_PUB is the public Application Programming Interface (API) package for the Oracle E-Business Suite Applications Security framework. It provides the centralized mechanism by which roles and privileges are granted on object instances to parties (users, groups, or other entities) and by which privilege and security information is subsequently queried. The package is central to the data-level and instance-level security model used across EBS products, notably within the EGO (Oracle Product Information Management / Item and Object Security) schema family. It is declared AUTHID CURRENT_USER, meaning that privilege evaluation at execution time is performed under the schema of the calling user, while the package is owned by APPS and classified as a PUBLIC API intended for controlled, supported invocation.

Its primary responsibilities include granting a role on an object instance, revoking previously granted roles, checking whether a party holds a privilege, and returning SQL predicate fragments that can be embedded into other queries to enforce security at the row level. The presence of GET_SECURITY_PREDICATE and GET_PARTY_SECURITY_PREDICATE indicates that the package is also used to generate dynamic WHERE-clause predicates applied by consuming code, allowing instance-based security to be enforced consistently without duplicating logic.

Key Procedures and Functions

The package exposes 26 documented procedures and functions. The principal groupings are:

• Granting and revoking: GRANT_ROLE, GRANT_ROLE_GUID, REVOKE_GRANT, and SET_GRANT_DATE manage the lifecycle of a grant, associating a role with an object instance and a party, and maintaining the effective date range.
• Privilege checking: CHECK_USER_PRIVILEGE, CHECK_PARTY_PRIVILEGE, CHECK_INSTANCE_IN_SET, CHECK_DUPLICATE_GRANT, and CHECK_DUPLICATE_ITEM_GRANT validate whether a privilege or membership already exists, supporting both enforcement and idempotent grant creation.
• Privilege retrieval: GET_PRIVILEGES, GET_PRIVILEGES_D, GET_PARTY_PRIVILEGES, and GET_PARTY_PRIVILEGES_D return the set of privileges held, with the _D variants providing denormalized or detail-oriented output.
• Instance retrieval and predicates: GET_INSTANCES_WITH_PRIVILEGE, GET_INSTANCES_WITH_PRIVILEGE_D, GET_SECURITY_PREDICATE, and GET_PARTY_SECURITY_PREDICATE support instance enumeration and dynamic predicate generation.
• Instance set management: CREATE_INSTANCE_SET builds the instance sets referenced by P_INSTANCE_SET_ID in the grant APIs, matching the user's search interest in CHECK_INSTANCE_IN_SET.

Tables Accessed

The package operates against the core Applications Security and Trading Community tables through APPS synonyms:

• FND_GRANTS — primary repository of grants (role, object, instance, party, effective dates).
• FND_OBJECTS and FND_OBJECT_INSTANCE_SETS — object definitions and instance set membership used by instance-set checks.
• FND_USER and HZ_PARTIES — resolve users and parties to which privileges are granted or checked.
• FND_FORM_FUNCTIONS and FND_MENUS — function and menu security metadata associated with role definitions.
• PLITBLM — the PL/SQL index-by table helper utility used to manipulate ID_TBL_TYPE collections returned by the GET APIs.

Usage Notes

EGO_SECURITY_PUB is intended for callers that need to manipulate or evaluate instance-level security: product forms that enforce item or object access, concurrent programs that bulk-assign grants, and custom extensions that require security checks consistent with the standard framework. It is referenced by ten other packages in the ETRM inventory, confirming that it functions as a shared security service layer rather than an isolated utility. Callers should supply a valid P_API_VERSION and inspect X_RETURN_STATUS and X_ERRORCODE on return. Because it is AUTHID CURRENT_USER, callers must possess appropriate privileges on the underlying tables. Predicate functions should be used in preference to hard-coded joins so that security logic remains governed by the framework.