Search Results fnd_grants_pkg




Overview
Explore in AI Chat

Overview

The APPS.FND_GRANTS_PKG package body is a core Oracle E-Business Suite foundation component that manages the granting and revocation of access to application functions and objects across the EBS security model. In both release 12.1.1 and 12.2.2, the package serves as the programmatic engine behind Oracle's function and object security layer, which determines whether a specific user, responsibility, or security group is permitted to invoke a given function, menu, or application object. The package is classified as an OTHER API, indicating it is not a formal public interface for customer extension but rather an internal utility used by other foundation packages and forms. Its status is VALID in the APPS schema, and it operates at the intersection of responsibility-based access control, function security, and object instance set configuration. In practice, the package provides the transactional methods by which grants are inserted, updated, locked, deleted, and loaded, and it exposes higher-level operations such as GRANT_FUNCTION and REVOKE_GRANT that translate business intent into the underlying FND_GRANTS records.

Key Procedures and Functions

The documented interface exposes fifteen procedures and functions that fall into several functional groupings.

These routines collectively shield callers from the physical layout of the grant tables and enforce validation through FND_API and FND_MSG_PUB.

Tables Accessed

The package reads and writes the central grants table, FND_GRANTS, which stores the association between a grantee and a secured object. It references FND_OBJECTS, FND_OBJECT_INSTANCE_SETS, and FND_MENUS to resolve and validate the target of a grant, and it consults FND_APPLICATION, FND_RESPONSIBILITY, and FND_SECURITY_GROUPS to identify grantees and their application context. DUAL is used for single-row lookups and utility SELECTs. Supporting dependencies include FND_FUNCTION_SECURITY_CACHE, FND_USER_RESP_GROUPS_API, FND_GLOBAL, FND_LOG, FND_MESSAGE, WF_DIRECTORY, and APP_EXCEPTION.

Usage Notes

FND_GRANTS_PKG is primarily invoked internally by Oracle's function security forms, by the grants and menu management UI, and by other foundation packages; the ETRM metadata records that it is referenced by 22 other packages. It is also called during patching and data loading when grant records must be seeded or migrated, and by security-related concurrent programs and APIs such as FND_USER_RESP_GROUPS_API. Custom code should call the supported higher-level APIs rather than the row-level routines directly. Because it is not referenced by any database object itself, it functions as a top-level utility, and any modification should be approached with caution given its role in the platform security model.