Search Results get_grantee_key

Overview

APPS.PA_SECURITY_PVT is a private PL/SQL package body within Oracle E-Business Suite that underpins the Oracle Projects (PA) security model. Its principal business function is to evaluate, grant, revoke, and manage the authority relationships that determine which users, resources, parties, and roles may access specific projects, organizations, and project-related functions. The package acts as the enforcement and maintenance layer for role-based and resource-based access control across the Projects application.

Unlike public APIs intended for direct external invocation, this package is classified as a PVT (private) package and is designed to be called by other Oracle Projects components. Its dependencies reveal heavy integration with Oracle Application Object Library (AOL) security infrastructure, notably FND_DATA_SECURITY, FND_GRANTS, FND_OBJECTS, FND_OBJECT_INSTANCE_SETS, FND_MENUS, and the Workflow role repository (WF_ROLES). This integration confirms that Projects security is built on top of the standard EBS function and data security framework, extended with project-specific constructs such as role types, resource assignments, and project statuses.

Key Procedures and Functions

The package exposes a documented set of 32 procedures and functions. Principal categories include:

• Privilege and access validation — CHECK_USER_PRIVILEGE, CHECK_ACCESS_EXIST, CHECK_SEC_BY_ROLE, and CHECK_MANAGER_RELATION determine whether a given user or resource holds the required relationship to a project, organization, or role.
• Grant and role lifecycle management — GRANT_ROLE, GRANT_ORG_AUTHORITY, UPDATE_ROLE, REVOKE_GRANT, REVOKE_ROLE, and LOCK_GRANT create, modify, revoke, or lock security grants and role assignments.
• Assistance and confirmation — CHECK_CONFIRM_ASMT supports assignment confirmation checks within the security workflow.
• Identifier and derivation utilities — GET_RESOURCE_ORG_ID, GET_PROJECT_ORG_ID, GET_INSTANCE_SET_ID, GET_MENU_NAME, GET_MENU_ID, GET_MENU_ID_FOR_ROLE, GET_PROJ_ROLE_NAME, GET_PARTY_ID, and IS_ROLE_EXISTS retrieve organizational, menu, party, and role metadata used to construct or resolve security definitions.

These routines collectively allow the Projects application to translate business relationships (for example, a person being a project manager or team member) into concrete security grants recognized by the EBS function security engine.

Tables Accessed

The package reads and writes project security data through APPS synonyms. Core project tables include PA_PROJECT_ROLE_TYPES_B (role type definitions), PA_PROJECTS_ALL, PA_PROJECT_PARTIES, and PA_PROJECT_STATUSES, which supply project identity, participating parties, and status context. Resource data is drawn from PA_RESOURCES, PA_RESOURCES_DENORM, and PA_RESOURCE_TXN_ATTRIBUTES. Menu and grant mappings are held in PA_ROLE_STATUS_MENU_MAP and the FND_GRANTS, FND_MENUS, FND_OBJECTS, and FND_OBJECT_INSTANCE_SETS tables. HR and user context come from PER_ALL_ASSIGNMENTS_F, PER_ALL_PEOPLE_F, and FND_USER, while Workflow role data is sourced from WF_ROLES.

Usage Notes

PA_SECURITY_PVT is invoked internally by the Oracle Projects security engine rather than by end users directly. It is typically called from Oracle Forms-based Projects windows when administrators define or maintain project roles and grants, from concurrent programs that synchronize or refresh project security, and from other Projects packages as part of privilege evaluation at runtime. The referenced-by count of 48 other packages underscores its central role. Customizations should not call this private package directly; instead, developers should rely on supported public APIs, since PVT packages may change without notice across releases such as 12.1.1 and 12.2.2.