Search Results get_party_privileges

Overview

EGO_SECURITY_PUB is the public Applications Security API package in Oracle E-Business Suite, owned by APPS and classified as a PUB (public) API in the ETRM repository. Its primary business function is to provide a centralized, programmatic interface for granting, revoking, and evaluating role-based and instance-based privileges across Oracle EBS objects. The package underpins the security model used by Oracle Product Information Management and related modules, allowing applications to determine whether a given user or trading partner party holds a specific privilege over an object instance.

The package header comment identifies it as "the public API for Applications Security." Internally, it also references a private helper, check_override_datasec, which historically evaluated whether a party was associated with a user whose responsibility included the EGO_OVERRIDE_DATASEC function — effectively a data-security override flag. This illustrates the package's role as the runtime custodian of fine-grained, party-aware access decisions.

The user search term "get_party_privileges" corresponds directly to one of the package's documented public procedures, which returns the set of privileges held by a specific party (typically a customer or trading partner represented in HZ_PARTIES).

Key Procedures and Functions

The documented interface exposes 26 procedures and functions, grouped logically into grant administration, privilege interrogation, and instance-set management:

• GRANT_ROLE / GRANT_ROLE_GUID — Create a grant of a named role to a party or user, with GRANT_ROLE_GUID supporting a GUID-based identifier variant.
• REVOKE_GRANT — Removes a previously established grant.
• CHECK_USER_PRIVILEGE / CHECK_PARTY_PRIVILEGE — Boolean-style validations that verify whether a user or a party currently holds a specified privilege.
• GET_PRIVILEGES / GET_PARTY_PRIVILEGES — Return the privileges held by a user or party respectively. GET_PARTY_PRIVILEGES is the object matched by the user's search.
• GET_PRIVILEGES_D / GET_PARTY_PRIVILEGES_D — Date-effective variants of the privilege retrieval calls, returning privileges as of a given effective date.
• GET_INSTANCES_WITH_PRIVILEGE / GET_INSTANCES_WITH_PRIVILEGE_D — Return object instances over which a privilege is held, with the "_D" suffix again denoting date-effective behavior.
• GET_SECURITY_PREDICATE / GET_PARTY_SECURITY_PREDICATE — Generate SQL predicate fragments that can be embedded in queries to enforce security filtering for users or parties.
• SET_GRANT_DATE — Establishes the effective date context for subsequent grant operations.
• CHECK_INSTANCE_IN_SET, CHECK_DUPLICATE_GRANT, CHECK_DUPLICATE_ITEM_GRANT — Validation helpers that test instance-set membership and detect redundant grant definitions before insert.
• CREATE_INSTANCE_SET — Creates a named grouping of object instances against which grants can be applied.

Tables Accessed

The package operates against the following APPS-synonymed tables:

• FND_GRANTS — The core grant repository storing role, party, and instance privilege assignments; read and written by grant, revoke, and query routines.
• FND_OBJECTS — Defines the securable objects (roles, items, and other entities) referenced by grants.
• FND_OBJECT_INSTANCE_SETS — Stores instance-set definitions and memberships used by CHECK_INSTANCE_IN_SET and CREATE_INSTANCE_SET.
• FND_FORM_FUNCTIONS, FND_MENUS — Support the override and responsibility-based security checks analogous to check_override_datasec.
• FND_USER — Resolves user-to-party relationships when translating between party and user privilege checks.
• HZ_PARTIES — Provides the party (customer/trading partner) master data underpinning GET_PARTY_PRIVILEGES and CHECK_PARTY_PRIVILEGE.
• PLITBLM — Receives partitioned or collection-based identifier lists used in batch instance processing.

Usage Notes

EGO_SECURITY_PUB is invoked both by standard Oracle EBS forms and concurrent programs — particularly within Product Information Management and item/catalog security flows — and by custom code requiring consistent privilege evaluation. Because it is classified as a public API, customizations may call its granted procedures directly rather than querying FND_GRANTS directly, which preserves compatibility across releases. The package is referenced by at least 10 other packages across the EBS schema, confirming its role as a shared security service. When porting customizations between 12.1.1 and 12.2.2, developers should note that GET_PARTY_PRIVILEGES and its date-effective counterpart are the supported entry points for returning a party's privileges; direct table access should be avoided in favor of these documented APIs.