Grant Client Configuration Privilege

Customization of IFS windows forms should be done by special users, so-called Profile Users. The functional role FND_CUSTOMIZE is given to a top role, later assigned to a Profile User.

Actions

  1. Open the Permission Sets page located in Solution Manager / Administration / Security.
  2. For each profile user permission set
    1. Select the permission set in the list.
    2. Select View Details... from the context menu.
    3. In the Permission Set page click on View Structure at the far right top of the form.
    4. Above the list of Granted Permission Set click Add... (or select Add... in the context menu of the list)
    5. Select FND_CUSTOMIZE in the list of available permission sets and click OK.
    6. Save the permission set.
  3. Click View Permission Set details at the far right top of the form Permission Set Grant Structure.
  4. Click Refresh Dictionary Cache

Verify Grants Enabled

  1. Log on to IFS Enterprise Explorer as a profile-user having the assigned grants.
  2. Open a single-record form, right-click and select Properties.
  3. The tab Layout should be visible. Also, depending on whether any fields exist that can be set as mandatory or/and non editable, one or both of the Mandatory and Read Only tabs should be visible.
Problem:None of the tabs Mandatory, Read Only, or Layout are visible.
Analysis:Security is not enabled for the configuration user.
Resolution:Checking the Object Properties - Layout  option in Security will make the Layout tab available in the Object Properties dialog for all forms. The other two options, Object Properties - Read Only and Object Properties - Mandatory enable the Read Only tab and the Mandatory tab.

Verify Grants Not Enabled for Normal Users

  1. Log on to IFS Enterprise Explorer as a user having normal end-user privileges.
  2. Verify that the Object Properties does not contain the tabs Layout, Read Only or  Mandatory.
Problem:Tabs for configuring client are visible
Analysis:The security cache may not have been refreshed or the users are running on privileges derived from a top user role without the FND_CUSTOMIZE revoked grants.
Resolution:Trace end user grants and make sure FND_CUSTOMIZE revoked.