Search Results fnd_resp101

Overview

FND_GRANTS_PKG is a core Oracle E-Business Suite foundation package owned by the APPS schema that manages the FND_GRANTS repository, the central store of access grants used by the EBS security model. Responsibilities, menus, functions, and role-based grants are all resolved against this repository at runtime when a user signs on or when the Menu security engine evaluates what a session may see and execute. The package provides the canonical Data Definition Language-style access layer over FND_GRANTS, allowing callers to insert, lock, update, load, and delete grant rows while keeping the denormalized columns of the grants table internally consistent with the underlying menu, object, and instance-set definitions.

The header identifies the package as AUTHID CURRENT_USER, meaning it executes with the privileges of the invoking schema rather than the definer. In released EBS environments it is invoked largely by the framework itself — the security engine, menu loader, and grants import routines — rather than by end users directly. The user search term "fnd_resp101" reflects the common practice of querying grants associated with a specific responsibility; FND_GRANTS_PKG is the object that ultimately maintains the rows such queries return.

Key Procedures and Functions

The ETRM metadata documents fifteen procedures and functions within the package. Their purposes are as follows:

• INSERT_ROW — inserts a new row into FND_GRANTS, accepting the full set of grant attributes (grant GUID, grantee type and key, menu, start and end dates, object and instance identifiers, program name and tag, audit columns, ten generic parameter columns, and context columns for security group, responsibility, application, and organization).
• LOCK_ROW — acquires a row-level lock on an existing grant so that concurrent updates cannot corrupt it.
• UPDATE_ROW — updates an existing grant row's attributes.
• LOAD_ROW — inserts a grant row if it does not already exist, otherwise updates the existing row; this is the idempotent loader used by seed and import processes.
• DELETE_ROW — removes a grant row.
• GRANT_FUNCTION — creates a grant associating a grantee with a function (menu function), the operative routine behind function-level security assignment.
• REVOKE_GRANT — removes an existing grant, reversing a prior GRANT_FUNCTION call.
• UPDATE_GRANT — modifies the attributes of an existing grant.
• LOCK_GRANT — locks a grant for the duration of a transaction.
• FILL_IN_ORIG_COLUMNS — populates the original-value columns on a grant so change tracking can compare before and after states.
• FILL_IN_MISSING_ORIG_COLUMNS — same as above for any original columns left null by the caller.
• DELETE_GRANT — deletes a specific grant record, distinguished from DELETE_ROW by the arguments it accepts.
• CONVERT_NULLS — normalizes null values in grant columns so that comparisons and joins behave predictably.

Tables Accessed

The package reads and writes the following tables through APPS synonyms:

• FND_GRANTS — the primary table, holding every grant row the package creates, updates, locks, or deletes.
• FND_MENUS — supplies menu definitions referenced by the MENU_ID column of a grant.
• FND_OBJECTS — provides object metadata for grants tied to a specific object such as a function.
• FND_OBJECT_INSTANCE_SETS — resolves instance-set identifiers used when a grant is scoped to a set of object instances.
• FND_RESPONSIBILITY — the responsibility definition referenced when a grant is granted to a responsibility.
• FND_APPLICATION — used to resolve application context for responsibility-based grants.
• FND_SECURITY_GROUPS — supplies the security group context used when grants are scoped per security group.
• DUAL — used for single-row lookups and constant evaluations.

Usage Notes

FND_GRANTS_PKG is not an end-user API. It is invoked by Oracle EBS framework components: the Menu and Function security engine, grants seeding and import programs, and other APPS packages — ETRM records twenty-two packages that reference it. Customizations that need to create or revoke function or menu grants should call GRANT_FUNCTION and REVOKE_GRANT (or LOAD_ROW for idempotent seed operations) rather than issuing direct DML against FND_GRANTS, so that the original-value columns and null normalization handled by FILL_IN_ORIG_COLUMNS and CONVERT_NULLS remain consistent. In 12.1.1 and 12.2.2 the package behaves identically; in 12.2 it is resident in the APPS container-adjacent file system alongside the other FND security packages. Because the package is AUTHID CURRENT_USER, callers must have appropriate privileges on the underlying tables. Grants created through this package are what make a responsibility such as "fnd_resp101" resolve to a specific set of menus and functions at sign-on.