Security and access FAQ — page 4
All FAQ topics / Security and access
296 questions · page 4 of 8
Is there a faster way to get a full list of pages per projection for an entire client install, rather than opening each page individually and checking the Debug Console one at a time?
Under what circumstances would the IFSAPP database user actually expire — an environment recently hit this for the first time, unexpectedly?
Users in a specific permission set get a permission error when expanding the Attachment panel on a page (like Customer Order), even after granting the DocumentHome and ApprovalRoutingAttachmentHandling projections that seem like the obvious candidates — how do you find exactly which additional projection is actually missing?
In IFS Aurena, there doesn't seem to be a way to fully create a user or apply Permission Sets — Solution Manager's Users screen appears very limited compared to what's possible in IEE. Is this an Aurena limitation, or is something set up wrong?
How do you schedule a custom PL/SQL script (like one that emails users whose IFS password is about to expire) to run automatically once a day, and is there a way to send just these specific emails as HTML when the environment's Mail Sender is otherwise set to plain text content?
How do you find a user account's original creation date in IFS — it's not available on either the FND_USER or ORACLE_ACCOUNT views, and FND_USER's OBJID/OBJVERSION columns only reflect the most recent change, not the original creation.
A specific window's grant option (visible via RMB on the Permission Set) has stopped working — it used to be grantable, but now attempting to grant it just removes it instead, with no error shown.
When setting up History Log for something like Routing Rules, System Settings, or Users/User Groups/Permission Sets, how do you actually find the right table/node in the Setup History Log tree view to enable logging on?
A newly created user can't find certain standard pages in Aurena's navigator, even after duplicating a working user's account and granting the exact same permission sets — what else could be different?
A right-click context menu action for a related order-analysis screen stays inactive on the Customer Order page, even though the analysis screen itself has been granted to the permission set.
After implementing SSO, every time users launch IFS from their desktop shortcut, a Microsoft account-picker pop-up appears asking them to choose an account, instead of logging them straight in via SSO — is there a way to skip this prompt?
A custom client (such as handheld-scanner software) authenticating to IFS via ADFS with an explicit resource parameter gets an 'unauthorized_client' error, even though the resource value used matches what the middleware server's own logging says it expects, and using any other resource value produces a 401 instead.
Is there a way to see which users are currently logged into Aurena, the way FND_CLIENT_LOGON shows currently logged-in IEE users?
Is there a way for a user to self-service reset a forgotten password from the IFS login page (having it emailed to their registered address), rather than needing an IT support ticket every time, given how often this happens with an offshore team working in shifts across multi-week login gaps?
What are the practical options for auditing and version-controlling changes to Permission Sets — export-to-source-control workflows are easy to forget or skip, especially when permission sets get modified indirectly through Quick Report or IAL deployments rather than directly through the permission set screens?
Is there a way to make one specific Site read-only for a set of users (blocking changes to things like Inventory Transactions, Customer Orders, and Work Orders at that Site specifically) without having to manually recreate every permission set, when all sites currently share the same permission sets?
With TLS 1.0/1.1 being phased out industry-wide, is IFS Connect's mail sender (used for emailing via Office 365/Exchange) able to use TLS 1.2, and from which release is this supported?
A SELECT statement run under one database login (like IFSINFO) needs to call API functions that are only granted under a different schema (like IFSAPP) — granting EXECUTE on those specific packages to the IFSINFO login doesn't error, but the query just silently returns zero rows instead of the expected data. Is there a safe way to grant an account like IFSINFO execute access to another schema's APIs, including whatever underlying tables/views those APIs themselves depend on?
Aurena Custom Object contexts/scopes are used to hide different fields on the same page for different groups of users (for example, different hidden fields in Scope A vs Scope B on Customer Order) — is there a way to actually prevent a user assigned to one scope from accessing another scope's version of the page, including the global/unscoped context?
Is there a query-based way (using system tables) to check whether a specific presentation object — like a particular form or window — has been granted Full access versus just Query access within a permission set, rather than checking manually?
Granting Query-only access to a specific presentation object (via Presentation Objects by Navigator) still lets users perform actions like adding new records on that screen — is this expected, and is there a way to actually lock it down to true read-only?
Is there a way to monitor or audit which user exported which data out of the IFS client (for example, via Output Channels)?
How do you restrict which specific custom menus (RMB actions) individual users can see and use — for example, only certain users should see certain custom menu options on a screen, not all users who have access to the screen itself?
Importing a permission set XML export (that's worked reliably for years) has recently started intermittently failing with an import error — re-importing the exact same file sometimes works, sometimes doesn't, regardless of which user account performs the import.
The lock/unlock button for editing My Start Pages only works for some users and not others — what permission controls this?
Users need to be prevented from changing the application's visual theme themselves through the client's Options dialog (a security-certification requirement to keep TEST and PROD visually distinct) — where is this controlled?
An Event Action querying CUSTOMER_ORDER_LINE returns no data and the event doesn't behave as expected, even though the identical logic works fine when run from a custom RMB menu action on the same screen, and the relevant technical accounts already have SELECT granted on the underlying table.
After creating a test database via RMAN duplication, users get 'Failed to retrieve security information — Access to forms will be restricted' when trying to log in.
After enabling SSO, a handful of accounts still need to authenticate via the database method (DB auth) instead — is the EE Admin access point the only way for those specific accounts to log in once SSO is the default for everyone else?
Is there a permission set setting that controls (and can be used to remove) the Quick Print button/option from a screen?
Users get 'No access' / 'Failed to load attachments' errors in Aurena on screens like NCR or CAPA, even with the FND_WEBENDUSER_MAIN permission set already granted, and the specific Entity Action referenced in similar community threads (FndTempLobStore) can't be found for these particular windows to grant directly.
How do you grant a specific user access to view a non-standard custom page built from a Custom Logical Unit, since it doesn't appear as a normal standard-module presentation object?
Is there an official/supported procedure to change the IFSSYS database account's password on Apps10, since it doesn't appear to be an option in the installer the way it was on earlier releases?
Is there a specific permission that controls whether a user can use Conditional Formatting, and can it be granted or revoked per user through a permission set — is it part of the FND_ENDUSER permission set?
Connecting IFS10 to Active Directory over plain LDAP (port 389) works fine, but switching to LDAPS (port 636) fails with 'Failed to connect to LDAP service: simple bind failed.'
As a managed-cloud customer without direct database access, is there still a way to see how often (or when) a specific user last logged into IFS Apps10?
The 'Print Shipment Delivery Note' right-click option on the Shipment screen appears greyed out for certain users — what permission actually controls this, and how would you go about finding out what governs any given greyed-out built-in RMB action in general?
Trying to build a custom event to react to changes on the standard Users record shows a completely blank System Info when opened from the Create User / user-details screen — what's actually the underlying Logical Unit or table for users, so a custom event can be built against it?
Our Active Directory domain predates Windows Server 2016 and doesn't natively support OpenID Connect — if we move to IFS Cloud before upgrading the domain, is there still a way to authenticate users against our existing on-prem AD, for example via a third-party relay that exposes LDAP as OpenID Connect?
No questions match. Try a broader term or reset the filters.