Search Results pa_security_extn

Overview

PA_SECURITY_EXTN is a PL/SQL package owned by the APPS schema in Oracle E-Business Suite 12.1.1 and 12.2.2. It forms part of the Oracle Projects (PA) security framework and is classified in the ETRM metadata as an "OTHER" API object rather than a public or private API. Its business purpose is to support the evaluation of project-level access for a user. In Oracle Projects, project access can be governed by a combination of organizational hierarchy rules, project role assignments, and custom business rules. PA_SECURITY_EXTN provides the extension points through which customer-defined logic can participate in that access decision without modifying the base PA_SECURITY package.

The package is documented as VALID, confirming that the compiled package and package body reside in the APPS schema. The ETRM record reports two documented procedures/functions and states that the package is referenced by one other package.

Key Procedures and Functions

The ETRM metadata documents two procedures or functions in PA_SECURITY_EXTN:

• CHECK_PROJECT_ACCESS — The primary extension routine for project access verification. It is designed to be invoked as part of the project security evaluation path so that a site can supplement or override the standard access outcome for a given user and project. Its name follows the Projects convention of a boolean-style check condition, allowing callers to determine whether access should be granted or denied under customer-specific criteria.
• CUSTOM_PROJECT_ACCESS — The companion extension routine providing the configurable hook for custom project access logic. Where CHECK_PROJECT_ACCESS performs the evaluation, CUSTOM_PROJECT_ACCESS supplies the customer-defined implementation that the security framework invokes during the same evaluation.

No parameter lists or return type signatures are recorded in the documented metadata, and none are inferred here.

Tables Accessed

The ETRM metadata does not list any tables referenced through APPS synonyms for this package. Because PA_SECURITY_EXTN is an extension package, its documented dependencies are limited to SYS.STANDARD and to the calling package PA_SECURITY; the visible dependency list does not enumerate Projects base tables. In practice, an extension package of this type would query or reference the standard Projects security views and tables (such as the project, project role, and security hierarchy definitions) through the invoking PA_SECURITY context, but no specific table references are documented for PA_SECURITY_EXTN itself and therefore none are asserted. Implementations placed behind this package may query any Projects or custom tables required to evaluate the customer's access rules.

Usage Notes

PA_SECURITY_EXTN is not intended for direct invocation from forms, concurrent programs, or ad hoc SQL. The ETRM dependency information states that PA_SECURITY_EXTN is referenced by PA_SECURITY, which positions the extension package beneath the main Projects security package in the call stack. PA_SECURITY is the runtime entry point used whenever the application must decide whether the current user may view, query, update, or otherwise act on a project, and it delegates the customer-specific portion of that decision to the routines in PA_SECURITY_EXTN.

Because of this caller relationship, the practical usage pattern is to implement site-specific access rules inside the extension package body, not to call the package from custom code. Organizations that require extended project security — for example, rule sets beyond the seeded security hierarchy or project role model — customize the extension body so that the standard security checks in PA_SECURITY automatically pick up the supplemental logic. The package should be treated as an upgrade-sensitive extension point: modifications persist across patching only if preserved and reapplied in accordance with Oracle's extension conventions.