Custom Security Inheritance Within Data Flows

Vijay Sai

Organization Name (Required - If you are an Oracle Partner, please provide the organization you are logging the idea on behalf of):

Description (Required):

Reports generated against data sets created from a data flow which relies on local subject areas do not honor the data access security that is enforced by the RPD. 

Use Case and Business Need (Required):

Business policy regulates and establishes the need for data access controls. This need is implemented using custom security tables. A user, may be granted privileges restricted by nature of his/her role, function and data attributes, such as sensitive information, aggregated versus transaction level detail, etc. An example is that every user by default is not granted a view into salary information that may feature on a report. To fulfil this need, we have a system that enables a data access request approval process. Once the data requirements are stated and approved for the user, a custom table is populated with the corresponding entries which include many fields some of which are user id, organization(s) for which data is requested, charge strings (basically this refers to project, task and award) and whether the salary numbers need to be restricted, etc. This table is referenced through the RPD to enforce the data access controls for the user when viewing reports and dashboards and has been working well. However, the data access controls are violated when the user is provided access to a report, dashboard or visualization that is based on data resulting from the execution of a data flow.

Enhancement Request / Service Request:

We request that the data flow service be enhanced to enable or inherit the data security configuration and honor the data access restrictions.