Currently any user having access to BIP developer is providing the ability to see any sensitive information in the Oracle fusion irrespective of data restrictions placed in the front end through role assignments.
User while creating a data model can see any HCM data like (Payroll details, DOB, SSN, etc.) as well as financial data like (Invoice number, payment details etc.)
This should be restricted in such a way that ONLY HCM user can see HR data and only Financial/Supplier user should see FSCM data. Otherwise this is a huge data breach issue of serious concern as it will lead to leakage of PII Data of all the users in the Oracle Instance.
Suggested Solution:
Segregate the Data source LOVs using separate privileges and create a new Delivered Role having these privileges. With this user having access to ApplicationDB_HCM related privilege will be ONLY able to see "ApplicationDB_HCM" LOV in the dropdown.
