Download Oracle HRMS Implementation Guide

HR_SECURITY.SHOW_RECORD is called if the current security profile
is a restricted security profile. It validates whether the row in question
is visible through the current security profile.
Security Context
The HR security context contains values for all the attributes of the
current security profiles. It is implemented using PL/SQL globals. The
current security profile is derived as follows:
1.
If you have logged onto Oracle Applications using the Oracle
Applications sign–on screen, your security context is automatically
set as part of the Oracle Applications sign–on procedure. Your
current security_profile_id is taken from the HR:Security Profile
profile option.
2.
If you have connected to an HR reporting user your current
security_profile_id is taken from the PER_SECURITY_PROFILES
table, where REPORTING_ORACLE_USERNAME matches the
name of the Oracle User to which you have connected.
3.
If it is not possible to derive a security_profile_id by either of the
above two methods, the current security_profile_id is set to zero,
which corresponds to the View All security profile for the Setup
Business Group. In this latter case, you are given unrestricted
access to the data in the HRMS tables that are accessible by your
Oracle User.
So, if you connect directly to the APPS Oracle User through SQL*Plus,
you will have unrestricted access to the HRMS tables. But if you
connect to an HR reporting user, your access is restricted according to
the definition of your security profile.
You can simulate the security context for an Oracle Applications
session by calling FND_GLOBAL.APPS_INITIALIZE (user_id, resp_id
and resp_appl_id), passing the IDs of the user, responsibility and
application for the sign–on session you want to simulate.
Note: Neither FND_GLOBAL or HR_SECURITY are accessible
from HR reporting users.
Security Lists
The security profile list tables contain denormalized lists of people,
positions, organizations and payrolls. An additional security profile
list table (PER_PERSON_LIST_CHANGES) is populated on employee
and applicant termination to enable terminated employees and
Technical Essays
A – 29