Question

Viewing History Log records of all users without granting FND_ADMIN permission

  • 29 December 2021
  • 3 replies
  • 392 views

Userlevel 5
Badge +6

Please check one of the requirements of the customer below. 

Some staff need to see insert and update history to Customer PO No field in Customer Order screen.  This is grabbed from the HISTORY_LOG and HISTORY_LOG_ATTRIBUTE tables. Users can only see what they have entered, but not what others have entered.

Need to know how to have report show what everyone has entered without giving FND_ADMIN permission (full admin access). 

 

Is there any way to do it? 


This topic has been closed for comments

3 replies

Userlevel 2
Badge +6

Hi @Anupa Arachchige , 

 

What if you create quick report or IAL and add grants to the report only?

 

Regards, Alex

Userlevel 7
Badge +22

Hi @Anupa Arachchige ,

we did the same thing. You need administrator permissions to access on HISTORY_LOG_TAB. A usual user doesn’t have this permissions. This is the problem.

And therefore you can create an IAL. With a quick report everybody will see these logs.

 

Kind regards

Userlevel 7
Badge +19

History logs are exposed to users via history_log oracle view and that has following row based security built in (WHERE condition). 

 

WHERE …. AND (Security_SYS.Has_System_Privilege('ADMINISTRATOR') = 'TRUE' OR
       username = nvl(rtrim(substr(userenv('CLIENT_INFO'),1,30)),user))

 

This means only users having ‘ADMINISTRATOR’ system privilege granted can see other users’ logs. You can grant this system privilege to individual users without granting the whole FND_ADMIN permission set but that is more or less the same.