Oracle Cloud offers a broad portfolio of software as a service applications, platform as a service, and social capabilities, all on a subscription basis. Oracle Cloud delivers instant value and productivity for end users, administrators, and developers alike through functionally rich, integrated, secure, enterprise cloud services.
 Get a Free Magzine ...Profit:The Executive's Guide to Oracle Applications

Subscribe to the OracleAppsHub to receive notifications when there are new posts:

 get RSS feed
 Oracle Fusion Applications (OFA) is a portfolio of next generation suite of software applications from Oracle Corporation. It is distributed across various product families; including financial management, human capital management, customer relationship management, supply chain management, procurement, governance, and project portfolio management
 Get a Free Magzine ...Profit:The Executive's Guide to Oracle Applications

Secure Configuration of Attachments

Posted on March 14th, 2013 by Sanjit Anand |Print This Post Print This Post |Email This Post Email This Post

This post is just a notes after a issue popup on attachments . Key profile options details is highlighted here.

1) File Upload Limits for Attachments

  • Set Profile: Upload File Size Limit (UPLOAD_FILE_SIZE_LIMIT)
    • Limits the maximum Attachment file size that can be uploaded
    • Specified in KB (e.g. 2000KB)
  • Allowing unlimited attachment sizes can allow for a Denial of Service attack (DOS)

2) Attachments file type extension validation

  • Set Profile: Attachment File Upload Restriction Default
    • Yes (default): Black list behavior – Disallow types marked as ‘N’
    • No (recommended): White list behavior – Only allow types marked as ‘Y’
  • Validate attachments file type extensions
    • New column - FND_MIME_TYPES. ALLOW_FILE_UPLOAD – values N & Y

This was Delivered as part of January 2012 CPU

3)Tag scanning of HTML Attachments

  • Set Profile: FND: Disable Antisamy Filter
    • False (default / recommended) – sanitize HTML pages
  • OWASP Antisamy – allows a specific (white list) of HTML elements and attributes
    • Error Message if uploaded HTML file was modified:

This was delivered as part of January 2012 CPU

Refernce :

  • MOS Note 604458.1: How to Limit The Attachment File Size?
  • MOS Note 1357849.1: Security Configuration Mechanism in Attachments
  • MOS Note 1357849.1: Security Configuration Mechanism in Attachments

Posted in EBS Suite | No Comments »

Oracle Credit Management : No Case Folder Upon Credit Application Creation

Posted on March 13th, 2013 by Sanjit Anand |Print This Post Print This Post |Email This Post Email This Post

Oracle Credit Management gives you the information and tools you need to monitor and evaluate the creditworthiness of your customers and make informed credit decisions faster.

CREATING A NEW CREDIT APPLICATION

To create a new credit application, you must first enter your search criteria and then select the credit applicant . This procedure capitalizes on the data that you already maintain by automatically populating the credit application with basic information about the applicant.

When you open a new application , Credit Management automatically prefills the application with certain basic information from the account record that you selected, such as account name, account number, address, requestor name, and so on.

Only those parties (both customers and prospects) who are defined with the customer type of Organization are included in the search results.

If you select a customer at the top organization level, then data for all accounts that are related to the organization will be consolidated for the credit analysis. Or, if you select a specific customer account from the search results, then the data for all sites that are associated with the account will be consolidated.

NO CASE FOLDER UPON CREDIT APPLICATION CREATION - WAY TO CHECK

When you create a credit application but do not get a case folder, what should you do?

Look for script wfstatus.sql (You can find the wfstatus.sql under $FND_TOP/sql/wfstatus.sql) , to get information about what may have occurred with the creation of your case folder during the workflow process.

In this script , the first parameter is the itemtype.

  • The itemtype for Oracle Credit Management (OCM) is ARCMGTAP.
  • The second parameter is the itemkey. There are two ways to get the itemkey:

If you check the workflow status and see that there is an error existing for your process, you can see the itemkey as part of the error.

For example, if your error looks something like this:

AR_CMGT_WF_ENGINE.IMPLEMENT_RECOMMENDATION(ARCMGTAP, 100424, Error while applying Removing Hold for Party : 76902 Cust Account id 107716 Site Use Id ONTOE_HOLDS_AUTHORIZATION_FAILEDACTIONRelease, ORA-0000: normal successful completion) Wf_Engine_Util.Function_Call(ar_cmgt_wf_engine.implement_recommendation, ARCMGTAP, 100424, 158878, RUN)

  • You will see both the itemtype = ARCMGTAP and right next to it the itemkey = 100424 < /FONT > .

If you do not see any errors, next step for you is to get the itemkey by using the CREDIT_REQUEST_ID using this query.

select APPLICATION_NUMBER,
CASE_FOLDER_NUMBER,
CREDIT_REQUEST_ID
from AR_CMGT_CREDIT_REQUESTS
where APPLICATION_NUMBER = '&number';
< /FONT >

FYI... WHEN CASE FOLDER IS MISSING FOR THE APPLICATION SUBMITTED

  1. Make sure the checklist actually exists for the credit classification and review type provided in the application.
  2. In some cases checklist exists but it may not be submitted. It may only be saved. It is also possible it may be end dated.
  3. Make sure credit assignment rules are assigned to the profile class/customer/bill to location.
  4. It is possible that your customer has multiple currency transaction rates for which currency exchange rates must be missing.
  5. Your checklist/scoring model to the checklist may have and additional customized data point for which setup may be incorrect.
  6. Workflow activities may have been stopped. Please run Workflow background process for item type “AR: Credit Management Application Process
  7. In case of credit review from order management review type will be common ‘Order Hold’ for all applications hence there should be a checklist for these review type with customer applicable credit classification.
  8. Some things may be mandatory to be provided in application like bank references, trade references, financial data etc. which may not be provided while submitting application. This mandatory data is required for the checklist created.

Posted in Oracle Credit Management | No Comments »

Page 1 of 11