SULLY1
VIP Member
I'm am building security from the ground up starting with *PUBLIC/APPLICATION SECURITY/NO.
I found what appears to be a big hole in security. Exp. Inquiry only user has access to P01012, P03013, P04012 with action security NO for add, change,delete and copy. If you take the form exit from P01012 to P03013 and the record does not exist(thinks it's add mode) the ok is NOT grey out. This is true for P04012 as well.
I also found this to be the case in Supplier Ledger Inquiry P0411 where you can add a p.o. from the form exit "Purchases Orders" P4310 even though the action security says NO to add, change, delete and copy.
I have a call into JDE and they were able to reproduce the problem! Can anyone else reproduce?
Patty
I found what appears to be a big hole in security. Exp. Inquiry only user has access to P01012, P03013, P04012 with action security NO for add, change,delete and copy. If you take the form exit from P01012 to P03013 and the record does not exist(thinks it's add mode) the ok is NOT grey out. This is true for P04012 as well.
I also found this to be the case in Supplier Ledger Inquiry P0411 where you can add a p.o. from the form exit "Purchases Orders" P4310 even though the action security says NO to add, change, delete and copy.
I have a call into JDE and they were able to reproduce the problem! Can anyone else reproduce?
Patty