Skip to main content
Question

FND_WEBENDUSER_MAIN ---> 'New DB Task Schedule' granted to End Users!

  • February 19, 2025
  • 5 replies
  • 60 views

Forum|alt.badge.img+10
  • Hero (Customer)
  • 96 replies

Hi,

I am new to cloud and noticed that ScheduledDatabaseTasksHandling (Database Task Schedule windows) is fully granted to end users through  FND_WEBENDUSER_MAIN.

Excuse my silly question, but why ? I cannot see why an End User must access and create new Schedule Task, it is more an admin job for admin users.

In EE & Aurena, we are able to revoke this projection/ Presentation Object but not anymore with Cloud.

 

Can someone please clarify.

As a workaround, I know I can hide it through Navigator Designer but the projection is still granted …

 

Much appreciated 

 

5 replies

PhillBronson
Hero (Customer)
Forum|alt.badge.img+11
  • Hero (Customer)
  • 161 replies
  • February 19, 2025

@NMALKI we ended up duplicating the Permission Set and making adjustments to that copy.

We saw the same security issue you noted as well as access to Workflows.


Forum|alt.badge.img+16
  • Superhero (Partner)
  • 446 replies
  • February 19, 2025

Hi ​@NMALKI 

 

By this You can schedule any reports. And only reports because by default FND_WEBENDUSER_MAIN does not give You access to any additional Database Task.

I think this is useful and safe. Worse if You have access to all lobbie in 23R2 with FND_WEBENDUSER_MAIN

 

 


Forum|alt.badge.img+10
  • Author
  • Hero (Customer)
  • 96 replies
  • February 20, 2025

@knepiosko thanks but even schedule reports I see it within the admin role and not end users.

 


Forum|alt.badge.img+10
  • Author
  • Hero (Customer)
  • 96 replies
  • February 20, 2025

@PhillBronson thanks I will have probably to do the same 😀


IWAHANS
Sidekick (Customer)
Forum|alt.badge.img+7
  • Sidekick (Customer)
  • 34 replies
  • July 28, 2025
NMALKI wrote:

Hi,

I am new to cloud and noticed that ScheduledDatabaseTasksHandling (Database Task Schedule windows) is fully granted to end users through  FND_WEBENDUSER_MAIN.

Excuse my silly question, but why ? I cannot see why an End User must access and create new Schedule Task, it is more an admin job for admin users.

In EE & Aurena, we are able to revoke this projection/ Presentation Object but not anymore with Cloud.

 

Can someone please clarify.

As a workaround, I know I can hide it through Navigator Designer but the projection is still granted …

 

Much appreciated 

 

Hello NMALKI,

Totally agree that this is way to much access for regular end users and the risk of anyone unintentionally (or intentionally) “tampering” with the DB Task Schedules is great. 

The description (in our verison 24R1 SU05) for Permission Set FND_WEBENDUSER_MAIN is “Basic role for end users of IFS Aurena. Contains framework functionality for end users” and there is nothing in an end users role that should require them to have access to CUD for “Database Task Scheduling (Projection: ScheduledDatabaseTasksHandling)

If the meaning is to give access to Projection: DatabaseTaskHandling, it is not part of Permission Set FND_WEBENDUSER_MAIN (in our verison 24R1 SU05).

I have raised an IFS SNOW case CS0420659 today and will keep this thread updated if there is any news related to this,

Br Hans


Reply


Cookie policy

We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.

 
Cookie settings