Security Rules In R12

Security Rules In R12:

Define segment value security rules to restrict user access to certain segment values when entering journals, performing online inquiries, and running FSG and some standard reports. Segment value security rules can work alone or with data access set security that secures data in ledgers, balancing segment values, or management segment values.

Define Security Rules:

Navigation: General Ledger --> Setup --> Financial --> Flexfields --> Key --> Security --> Define.

To define security rules:
1. Navigate to Define Security Rules window.
2. In the Segment Values block, identify the value set to which your values belong. You can identify your value set or by the flexfield segment or concurrent program parameter that uses the value set.
3. In the Security Rule region, enter a name and description for your security rule.
4. Enter a message for this security rule. This message appears automatically whenever a user enters a segment value that violates your security rule.
5. Define the security rule elements that make up your rule.
6. Save your changes.

Defining Security Rule Elements

You define a security rule element by specifying a value range that includes both a low and high value for your segment. A security rule element applies to all segment values included in the value range you specify. You identify each security rule element as either Include or Exclude, where Include includes all values in the specified range, and Exclude excludes all values in the specified range. Every rule must have at least one Include rule element, since a rule automatically excludes all values unless you specifically include them. Exclude rule elements override Include rule elements. You should always include any default values you use in your segments or dependent value sets. If the default value is secured, the flexfield window erases it from the segment as the window opens, and the user must enter a value manually. If you want to specify a single value to include or exclude, enter the same value in both the Low and High fields.
Minimum and maximum possible values The lowest and highest possible values in a range depend on the format type of your value set. For example, you might create a value set with format type of Number where
the user can enter only the values between 0 and 100. Or, you might create a value set with format type of Standard Date where the user can enter only dates for the current year (a range of 01-JAN-2008 to 31-DEC-2008, for example). For example, if your format type is Char, then 1000 is less than 110, but if your format type is Number, 110 is less than 1000. The lowest and highest possible values in a range are also operating system dependent. When you use a Char format type for most platforms (ASCII platforms),
numeric characters are "less" than alphabetic characters (that is, 9 is less than A), but for some platforms (EBCDIC platforms) numeric characters are "greater" than alphabetic characters (that is, Z is less than 0). The window gives you an error message if you specify a larger minimum value than your maximum value for your platform.
If you leave the low segment blank, the minimum value for this range is automatically the smallest value possible for your segment's value set. For example, if the value set maximum size is 3 and Right-justify and Zero-fill Numbers is checked, the minimum value is 000. However, if the value set has a maximum size of 3, has Numbers Only checked and Right-justify and Zero-fill Numbers unchecked, the minimum value is 0.
If you leave the high segment blank, the maximum value for this range is automatically the largest value possible for your segment's value set. For example, if the value set maximum size is 3 and Numbers Only is checked, the maximum value is 999. However, 5-18 Oracle Applications Flexfields Guide
if the value set maximum size is 5, and Numbers Only is checked, the maximum value is 99999.
Tip: Use blank segments to specify the minimum or maximum possible values for a range to avoid having operating system dependent rules. Note that security rules do not check or affect a blank segment value (null value).

To define security rule elements:
1. In the Security Rule Elements block, select the type of security rule element. Valid
types are:
Include Your user can enter any segment value that falls in the
following range.
Exclude Your user cannot enter any segment value that falls in
the following range.
2. Enter the low (From) and high (To) ends of this value range. Your value does not
have to be a valid segment value.

Assigning Security Rules:

Navigation: General Ledger --> Setup --> Financial --> Flexfields --> Key --> Security -->Assign.

To assign security rules:

1. Navigate to Assign Security Rules window.
2. In the Assign Security Rules block, identify the value set to which your values belong. You can identify your value set or by the flexfield segment or concurrent program parameter that uses the value set.
3. In the Security Rules block, enter the application and responsibility name that uniquely identifies the responsibility to which you want to assign security rules.
4. Enter the name of a security rule you want to assign to this responsibility.
5. Save your changes.