Configuring Journal Source Security with multiple roles
We learned that the Journal Source Security program logic looks at the first role configured (sorted alphabetically) on the Journal Source Security by Role page for a particular user, source, BU and Setid combination.
For example USER1 below has three roles with only the third role ROLE_C allowing override for a journal source. However the program only considers the first role alphabetically (ROLE_A), which doesn't have the override checked and doesn't allow the user to post journals for the same journal source after cutoff.
SELECT A.ROLENAME, A.GL_OVERRIDE_CUTOFF FROM PS_GL_JRNL_ROL_SRC A WHERE EXISTS (SELECT 1 FROM PSROLEUSER B WHERE B.ROLEUSER = 'USER1' AND A.ROLENAME = B.ROLENAME) AND A.BUSINESS_UNIT = '10000' AND A.SETID = '10000' AND A.SOURCE = 'SOURCE'