0 Replies Latest reply on May 24, 2017 11:37 AM by 2887107

    Security issue: Reassign button in Sourcing and iSupplier notifications expose list of all employees

    2887107

      Hi,

       

      Oracle Sourcing and iSupplier notifications to suppliers has the Reassign button. However, when a supplier clicks on this button, they are able to view the complete list of internal employees. 

      Ideally, they should only see list of persons with a user account within their supplier organization.

       

      Regards,

      Jai