Security Issue: Photo Update still available in Redwood despite removing ORA_PER_MANAGE_PERSON_IMAGE
Summary:
On Redwood UX , we are encountering an issue with restricting the profile photo update capability on the Personal Details page.
The Requirement: We want to prevent specific users/roles from being able to edit or update their profile photo within the Redwood Personal Details screen.
Steps Taken:
- We have identified the custom role assigned to the user.
- We removed the privilege Manage Person Image (ORA_PER_MANAGE_PERSON_IMAGE) from the role.
- We ran the Retrieve Latest LDAP Changes and Regenerate Data Security Grants processes to ensure the security changes were applied.
The Issue: Despite removing the privilege, the user is still able to see the "Edit" (pencil) icon and successfully upload/update their photo on the Redwood Personal Details page.
0