Search Results ego_security_pub




Overview
Explore in AI Chat

Overview

APPS.EGO_SECURITY_PUB is the public Application Programming Interface (API) package for the Oracle E-Business Suite Applications Security framework. It provides the centralized mechanism by which roles and privileges are granted on object instances to parties (users, groups, or other entities) and by which privilege and security information is subsequently queried. The package is central to the data-level and instance-level security model used across EBS products, notably within the EGO (Oracle Product Information Management / Item and Object Security) schema family. It is declared AUTHID CURRENT_USER, meaning that privilege evaluation at execution time is performed under the schema of the calling user, while the package is owned by APPS and classified as a PUBLIC API intended for controlled, supported invocation.

Its primary responsibilities include granting a role on an object instance, revoking previously granted roles, checking whether a party holds a privilege, and returning SQL predicate fragments that can be embedded into other queries to enforce security at the row level. The presence of GET_SECURITY_PREDICATE and GET_PARTY_SECURITY_PREDICATE indicates that the package is also used to generate dynamic WHERE-clause predicates applied by consuming code, allowing instance-based security to be enforced consistently without duplicating logic.

Key Procedures and Functions

The package exposes 26 documented procedures and functions. The principal groupings are:

Tables Accessed

The package operates against the core Applications Security and Trading Community tables through APPS synonyms:

  • FND_GRANTS — primary repository of grants (role, object, instance, party, effective dates).
  • FND_OBJECTS and FND_OBJECT_INSTANCE_SETS — object definitions and instance set membership used by instance-set checks.
  • FND_USER and HZ_PARTIES — resolve users and parties to which privileges are granted or checked.
  • FND_FORM_FUNCTIONS and FND_MENUS — function and menu security metadata associated with role definitions.
  • PLITBLM — the PL/SQL index-by table helper utility used to manipulate ID_TBL_TYPE collections returned by the GET APIs.

Usage Notes

EGO_SECURITY_PUB is intended for callers that need to manipulate or evaluate instance-level security: product forms that enforce item or object access, concurrent programs that bulk-assign grants, and custom extensions that require security checks consistent with the standard framework. It is referenced by ten other packages in the ETRM inventory, confirming that it functions as a shared security service layer rather than an isolated utility. Callers should supply a valid P_API_VERSION and inspect X_RETURN_STATUS and X_ERRORCODE on return. Because it is AUTHID CURRENT_USER, callers must possess appropriate privileges on the underlying tables. Predicate functions should be used in preference to hard-coded joins so that security logic remains governed by the framework.