Two Security Models in Oracle EBS:Function Security + Role-Based Access Control

最新推荐文章于 2025-08-16 09:13:57 发布

cnvdkx2837

最新推荐文章于 2025-08-16 09:13:57 发布

阅读量132

点赞数

文章标签：数据库

本文介绍了Oracle E-Business Suite中的两种主要安全模型：基于职责的安全性（Function Security）和基于角色的访问控制（RBAC）。基于职责的安全性主要用于提供对菜单功能的访问权限，而RBAC则在此基础上进行了扩展，提供了更结构化的用户访问控制，降低了管理用户访问控制系统的成本，并简化了安全策略和规则的设置与实施。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

There are two main security models in Oracle E-Business Suite: “traditional” Oracle E-Business Suite responsibility-based security (usually referred to as “function security”) and Role-Based Access Control (RBAC).

Function Security(Responsibility)

One of the main purposes of a responsibility is to provide access to a menu of functions.
For the simplest case of responsibility-based security, a menu is attached to a responsibility, and then a responsibility is assigned to a user.

At that point, the user has access to all of the functions attached to the menu through the responsibility.
Note that if the Grant check box is not checked for a particular function, the user cannot access that function.

Role-Based Access Control (RBAC)

Role-Based Access Control (RBAC) builds upon responsibility-based security.

Before 11.5.10 the only method for granting rights to users was through the use of responsibility. This gives the following problems:
- Diffcult to maintain
- who is assigned to which responsibilities?
- how can I easily revoke rights from my Inventory users?
- Easy to make mistakes.

The benefits of implementing Role Based Access Control (RBAC) are
- Structured user access control
- Reduced cost of administering user access control system
- Streamlined setup and implementation of security policies and rules

Therefore, in the release 11.5.10 Oracle has added the Role Based Access Control(RBAC), Initially, A Role contains one or more responsibilities.