Search Results hri_oltp_view_security




Overview
Explore in AI Chat

Overview

HRI_OLTP_VIEW_SECURITY is an Oracle E-Business Suite PL/SQL package owned by the APPS schema and classified under the API classification category OTHER. It is a security helper package used within the Oracle HRMS (Human Resources Management System) intelligence and OLTP reporting layer, specifically to enforce organization-based security on HRMS reporting views and related data access paths. The package header, identified by the RCS version string hriovsec.pkh 120.2 (dated 2011/11/01), declares the package with AUTHID CURRENT_USER, meaning that all SQL executed within its scope is parsed and executed under the privileges of the invoking user rather than the package owner. This is a significant design characteristic for a security-oriented package, since it ensures that row-level and view-level security checks honor the calling session's security profile rather than the APPS schema's broad privileges.

The package contains no documented procedures, only functions. Its role is investigative and evaluative: given an organization structure version or an organization structure identifier, it determines whether a security restriction or hierarchy-version relationship exists for that entity. In practice, such checks are used to gate which organizations or organization hierarchy versions a given user is permitted to see when querying HRMS operational reporting (OLTP) views. This supports Oracle's Organization Security Profile model, in which users are granted access to specific organizations or hierarchies through security profiles assigned to their responsibilities.

Key Procedures and Functions

The documented API surface consists of two functions:

  • EXIST_ORGHVRSN_FOR_SECURITY — Evaluates whether a security relationship exists for a given organization structure version. The parameter is typed against PER_ORG_STRUCTURE_VERSIONS.ORG_STRUCTURE_VERSION_ID, and the function returns a VARCHAR2. Its purpose is to answer the question of whether the identified hierarchy version participates in, or is constrained by, the applicable organization security configuration for the current session.
  • EXIST_ORGH_FOR_SECURITY — Performs the analogous check for a top-level organization structure, keyed on PER_ORG_STRUCTURE_VERSIONS.ORGANIZATION_STRUCTURE_ID. It returns a VARCHAR2 indicating whether a security definition exists for that organization structure.

The use of a VARCHAR2 return type, rather than BOOLEAN, is consistent with EBS conventions: the value can be returned directly into a SQL SELECT list, a form item, or a host variable, and it avoids the restriction that SQL cannot invoke functions returning BOOLEAN. The metadata does not document the specific literal values returned, so callers should not assume a fixed encoding without inspecting the package body.

Tables Accessed

The package references a single documented table, PER_ORG_STRUCTURE_VERSIONS, accessed via an APPS synonym. This table stores the versioned definitions of organization hierarchies, linking an organization structure to a specific version together with its effective dates. Because both functions accept identifiers drawn from this table, the package queries it to correlate the supplied structure or version identifier with existing security definitions. No insert, update, or delete activity is documented; the package is read-only with respect to its underlying data.

Usage Notes

HRI_OLTP_VIEW_SECURITY is referenced by three other packages in the EBS code base, indicating that it functions as a shared utility consumed by higher-level HRMS reporting and security packages rather than being invoked directly by end users. It is typically called during the execution of HRMS OLTP extraction and reporting logic, where a view or query must be filtered according to the invoking user's organization security profile. Because the package is declared AUTHID CURRENT_USER, it is well suited to being called from within secured views, where the security predicate must evaluate against the caller's privileges. Customizations that extend HRMS reporting security should invoke these functions rather than querying PER_ORG_STRUCTURE_VERSIONS directly, in order to remain consistent with Oracle's supported security model. The package is present in both EBS 12.1.1 and 12.2.2; the version 120.2 header indicates the shipping lineage is unchanged across the 12.x family.