Jeffrey T Hare, CPA CISA CIA's blog
Jeffrey Hare's blog on internal controls and security in an Oracle Applications environment.
OA Framework architectural deficiencies
Many of you may have seen a couple of questions I posted on OAUGnet and other forums in the past week or so related to OA framework forms.  Here are the three questions I posted:



1. Where do I go to get the created by, last updated by information



that is available in the professional forms via the Record History field.



2. Is there anything equivalent in the OA framework forms to the



Last Query?



3. Can you make these forms 'View Only' by making adding



QUERY_ONLY="YES" to the Parameters field in the Function form?



After hearing from several folks I consider experts in this area, my fears were confirmed.  There are some inherent flaws in the architecture of OA framework forms.  The answer to all the above questions is these features don't exist in OA framework forms.  The 'standards' Oracle uses to develop such forms apparently don't take into account such requirements.



I have been amassing a running list of internal controls and security deficiencies in Oracle's EBS and will add these three items to the list.  For end users, this list is published in the ICR.  The ICR is an end user only forum. 



Many of you know that I have been calling for Oracle to create a Customer Advisory Board (CAB) at the EBS level to address these architectural issues.   I will do a separate blog in the coming days to outline the need for such a CAB and why existing feedback mechanisms aren't communicating these issues to Oracle execs properly.   Anyone with similar frustrations, please contact me directly at jhare@erpseminars.com.  I am told that these are issues that Steven Chan needs to address, but I don't have a relationship with him.  If someone out there can make me an intro to Mr. Chan, I'd love to sit down with him and make the case on our behalf.



Regards,

Jeffrey T. Hare, CPA CISA CIA



2008-09-16 15:09:10 GMT
Add to My Yahoo! RSS