Search Results fnd_table_of_varchar2_120




Overview
Explore in AI Chat

Overview

EGO_DOM_SECURITY_PVT is an Oracle E-Business Suite private PL/SQL package owned by the APPS schema that resolves document security by translating underlying data security rules into grantee-level access decisions. The package declaration is compiled with AUTHID CURRENT_USER, meaning its unqualified object references resolve against the invoker's schema and current session privileges rather than the defining schema. As indicated by its _PVT suffix and its header comment, the package is intended for internal consumption by other EGO (Oracle Product Information Management / Documentation) components and Oracle-supported APIs; it is not a published public interface and Oracle does not guarantee its signature across patches or upgrades.

The package operates at the intersection of two security models: the Oracle EBS data security model (roles, grantees, and object instance sets defined through FND_GRANTS and FND_OBJECT_INSTANCE_SETS) and the document management model (attachments and documents stored via FND_DOCUMENTS and FND_ATTACHED_DOCUMENTS). Its core purpose is to answer the question, "Which users, roles, and privileges apply to a given entity instance?" so that callers can render or filter document and attachment information appropriately.

Key Procedures and Functions

  • GET_USERS — Returns the set of grantees for a specified entity identified by up to five primary key values (p_pk1_value through p_pk5_value), optionally narrowed by a role name. It returns parallel collections of grantee names, grantee types, role names, role display names, and default access values, along with a return status.
  • GET_VALID_INSTANCE_SET_IDS — Resolves the object instance set identifiers valid for a given object name, grantee type, and parent object SQL, applying up to five bind values and returning the instance set IDs as an output string. This is the mechanism by which parent-child data security restrictions are expanded into concrete instance set memberships.
  • GET_DEFAULT_ACCESS — A function that, given a menu identifier, returns the default access level as a VARCHAR2. It derives fallback access when no explicit grant exists.
  • GET_ATTACHMENT_PRIVILAGES — Determines the privileges a caller holds against a specific attachment, complementing the grantee resolution performed by GET_USERS.

Tables Accessed

The package reads and, where applicable, writes through APPS synonyms to the following:

  • FND_GRANTS — core repository of grantee privileges against secured objects; the primary source for GET_USERS and default access resolution.
  • FND_OBJECTS, FND_OBJECT_INSTANCE_SETS — define the secured object and its instance set membership, used by GET_VALID_INSTANCE_SET_IDS.
  • FND_MENU_ENTRIES and FND_FORM_FUNCTIONS — resolve menu-to-function mappings that underpin menu-based default access in GET_DEFAULT_ACCESS.
  • FND_DOCUMENTS and FND_ATTACHED_DOCUMENTS — supply the document and attachment context that the privilege check operates on.
  • HZ_PARTIES and MTL_SYSTEM_ITEMS_B — resolve grantee identities for trading partners and inventory items that participate in document security.
  • DBMS_SQL and PLITBLM — dynamic SQL execution and PL/SQL table manipulation utilities used internally to assemble dynamic queries (for example, the parent object SQL passed to GET_VALID_INSTANCE_SET_IDS) and array results.

Usage Notes

Because EGO_DOM_SECURITY_PVT is classified as a private (PVT) API and is referenced by zero other packages in the documented metadata, it is normally invoked indirectly rather than called from customer code. Typical callers include:

  • Oracle Forms and OAF pages within the product information, item, and attachment management flows, which need to enumerate grantees or determine whether a user may view or modify an attachment.
  • Entity-level and menu-level security enforcement logic within the EGO framework, where GET_USERS and GET_DEFAULT_ACCESS are combined to build an effective access decision.
  • Oracle-supported internal programs performing bulk reconciliation of document grants against data security definitions.

The FND_TABLE_OF_VARCHAR2_120 typed OUT parameter in GET_USERS is a defining characteristic of the package's public surface: it returns multi-row grantee results as PL/SQL index-by tables, which must be consumed by PL/SQL callers rather than SQL. Because the package uses AUTHID CURRENT_USER and relies on APPS synonyms, any direct invocation from custom code should be wrapped in a package that executes with the privileges required to read the FND and EGO security tables. Given the private classification and the package's compilation against a 2012 shipment baseline (header revision 120.5.12020000.2), custom dependencies on EGO_DOM_SECURITY_PVT are discouraged; Oracle may alter or remove its procedures without prior notification, and the documented metadata exposes no public API contract guaranteeing backward compatibility.