System Parameters - Enable bind variables for SQL Quick Reports in IFS EE -QR_SECURITY_CHECK

Hi,

we couldn’t find any documentation either, but we solved the issue by concatenating wild cards instead of having it in the same text. We recently upgraded to Apps10 UPD18 (from UPD7)

QR SQL BEFORE the parameter was in use (also works with parameter set to “NO”)

SELECT (SELECT ora_database_name
          FROM dual) AS "Instance",
       t.identity AS "User Id",
       t.description AS "User Description",
       ur.role AS "End User Role Id",
       ifsapp.fnd_role_api.Get_Description(ur.role) AS "End User Role Description",
       t.active AS "Active"
  FROM ifsapp.fnd_user      t,
       ifsapp.fnd_user_role ur
 WHERE t.identity = ur.identity(+)
   AND t.identity LIKE '%&User_Id%'
   AND t.description LIKE '%&User_Description%'
   AND ur.role LIKE '%&End_User_Role_Id%'
   AND t.active LIKE '%&Active%'
 ORDER BY t.identity

QR SQL AFTER, when the new parameter is in use (Enable bind variables for SQL Quick Reports in IFS EE set to “YES”)

SELECT (SELECT ora_database_name
          FROM dual) AS "Instance",
       t.identity AS "User Id",
       t.description AS "User Description",
       ur.role AS "End User Role Id",
       ifsapp.fnd_role_api.Get_Description(ur.role) AS "End User Role Description",
       t.active AS "Active"
  FROM ifsapp.fnd_user      t,
       ifsapp.fnd_user_role ur
 WHERE t.identity = ur.identity(+)
   AND t.identity LIKE '%' || &User_Id || '%'
   AND t.description LIKE '%' || &User_Description || '%'
   AND ur.role LIKE '%' || &End_User_Role_Id || '%'
   AND t.active LIKE '%' || &Active || '%'
 ORDER BY t.identity

Kind regards,

//Lovisa