Search Results hz_dss_grants_pub




Overview
Explore in AI Chat

Overview

HZ_DSS_GRANTS_PUB is a public PL/SQL API package in the Oracle E-Business Suite Applications (APPS) schema that manages Data Sharing Group (DSS) grants within the Trading Community Architecture (TCA) and its underlying security infrastructure. Data Sharing Groups in Oracle EBS define collections of users, responsibilities, or other grantees that are permitted to access specific secured entities, such as customers, contacts, or accounts. This package provides the programmatic interface for creating, modifying, and validating the access privileges granted to those grantees.

The package exposes grant administration at the level of individual privilege flags — view, insert, update, delete, and administration — allowing callers to define fine-grained permissions against secured entities. It also encapsulates the administrative logic required to determine whether a given user or responsibility holds administrative authority over a Data Sharing Group. As a public API, it is designed to be invoked by other EBS modules, forms, and customer extensions rather than being restricted to internal package use.

Key Procedures and Functions

The documented API surface contains seven procedures and functions, of which three principal entry points are catalogued:

  • CREATE_GRANT — Creates a set of grants to a Data Sharing Group. Two documented overloads exist. The first signature aligns with the user interface and corresponds to a "UI Grant Create" operation, accepting a group code, grantee type, grantee key, and the individual view, insert, update, delete, and administrative privilege flags. The second overload is invoked when a new secured entity is added to a Data Sharing Group, accepting a group code, an instance set identifier, and a secured entity status. Both return standard EBS message-list outputs (return status, message count, and message data) and accept an optional initialization flag.
  • UPDATE_GRANT — Modifies existing grants associated with a Data Sharing Group, adjusting the privilege flags or grantee assignments previously established through CREATE_GRANT.
  • CHECK_ADMIN_PRIV — Evaluates and returns whether the calling context possesses administrative privilege over a Data Sharing Group, supporting authorization decisions before privileged operations are permitted.

Global constants declared within the package (g_dss_admin_create, g_dss_admin_update, g_dss_admin_grant) standardize the administrative action identifiers used across the grant lifecycle.

Tables Accessed

The package operates against several FND and HZ tables through APPS synonyms. FND_GRANTS stores the actual grant records maintained and queried by CREATE_GRANT and UPDATE_GRANT. FND_OBJECTS and FND_OBJECT_INSTANCE_SETS, together with FND_OBJECT_INSTANCE_SETS_S, define the secured object metadata and instance set membership used when a new secured entity is registered. FND_MENUS and FND_RESPONSIBILITY support grantee resolution, since responsibilities are a common grantee type. HZ_DSS_GROUPS_B holds the definition of the Data Sharing Group itself, while HZ_DSS_SECURED_ENTITIES identifies the entities being protected. DUAL is used for scalar evaluations, including portions of the administrative privilege check.

Usage Notes

HZ_DSS_GRANTS_PUB is typically invoked from TCA and Data Sharing Group maintenance forms during grant creation and update operations, and from internal processing that registers newly secured entities into existing groups. The API is also referenced by at least one other documented PL/SQL package, indicating use in higher-level orchestration logic. Custom code should call these procedures rather than inserting directly into FND_GRANTS, because the package enforces the administrative and instance-set validation logic. Callers must supply p_init_msg_list appropriately and always inspect x_return_status and the accompanying message outputs before proceeding, as is standard for EBS public APIs. The header comment dates the original implementation to 2002, with an additional overload added in 2004, and the package remains available in both 12.1.1 and 12.2.2 releases.