Search Results igs_sc_grants_s

Overview

The APPS.IGS_SC_DATA_SEC_APIS_PKG package body is a core data-security processing package belonging to the Oracle Student System (IGS) application, classified under the EBS 12.1.1 / 12.2.2 code line. Its stated purpose in the header comment is the processing and gathering of the security process for the Oracle Student System. The package therefore provides the programmatic foundation through which Student System records are secured — grouping objects, defining object attributes and methods, attaching grant conditions, and mapping local roles and users into the FND security model. Originally created by Don Shellito on 8 April 2003, the package has an extensive change history reflecting bug fixes spanning 2003 through 2006, including grant-unlock behaviour for object_group_id = -1, index-friendly cursor rewrites, FND logging integration, and adoption of wf_local_synch in place of a private synchronisation API.

Key Procedures and Functions

The ETRM metadata documents 43 procedures and functions, organised around insert and update operations. The core families are:

• Grant operations: INSERT_GRANT and UPDATE_GRANT create and maintain grant records; INSERT_GRANT_COND and UPDATE_GRANT_COND maintain the predicate conditions attached to grants. The change history notes that UPDATE_GRANT_COND gained an overwrite parameter, removed an internal grant-condition cursor, and was modified to update the condition number directly.
• Object definition: INSERT_OBJECT, UPDATE_OBJECT, INSERT_OBJECT_GROUP, UPDATE_OBJECT_GROUP, INSERT_OBJECT_ATTR, UPDATE_OBJECT_ATTR, INSERT_OBJECT_ATTR_METHOD, UPDATE_OBJECT_ATTR_METHOD, INSERT_OBJECT_FUNC, and UPDATE_OBJECT_FUNC collectively register the objects, attribute groups, attribute methods, and functions that participate in the security model.
• User attribute mapping: INSERT_USER_ATTR and UPDATE_USER_ATTR manage user attribute assignments used to evaluate security predicates.
• Local role and user-role management: INSERT_LOCAL_ROLE, UPDATE_LOCAL_ROLE, INSERT_LOCAL_USER_ROLE, and UPDATE_LOCAL_USER_ROLE synchronise Student System roles with the Workflow local tables.

Notably, INSERT_USER_ATTR and UPDATE_USER_ATTR are the routines most directly associated with the searcher's term "user_attrib"; they operate against IGS_SC_USR_ATTRIBS.

Tables Accessed

The package reads and writes via APPS synonyms. Security definition data resides in IGS_SC_OBJECTS, IGS_SC_OBJ_GROUPS, IGS_SC_OBJ_ATTRIBS, IGS_SC_OBJ_ATT_MTHS, IGS_SC_OBJ_FUNCTNS, IGS_SC_GRANTS, and IGS_SC_GRANT_CONDS, with the companion _S tables (IGS_SC_GRANTS_S, IGS_SC_OBJ_ATTRIBS_S) holding translated or secured variants. User attribute values are stored in IGS_SC_USR_ATTRIBS and IGS_SC_OBJ_ATT_VALS. Integration with Oracle Foundation security occurs through FND_OBJECTS, FND_OBJECTS_S, and FND_USER, while role synchronisation uses WF_LOCAL_USER_ROLES (referenced via wf_local_synch from Bug 5081932).

Usage Notes

This package is an internal API layer; it is not intended for direct end-user invocation. It is typically called by the Student System security maintenance forms and concurrent programs that administer data security, and it is referenced by two other packages within the application. Customisations should call the public insert/update routines rather than touching the underlying tables, since the package enforces grant-condition handling, FND logging, and role synchronisation. Developers extending security predicates should be aware that the long_predicate parameter added to Modify_Policy permits predicate WHERE clauses up to 32K, and that cursor handling was tightened (cursors closed where appropriate) to avoid resource leakage in long-running sessions.