{"id":739,"date":"2008-08-14T15:10:32","date_gmt":"2008-08-14T19:10:32","guid":{"rendered":"http:\/\/onlineappsdba.com\/index.php\/2008\/08\/14\/node-responsibility-trust-level-in-oracle-applications-e-business-suite-11ir12\/"},"modified":"2008-08-14T15:15:10","modified_gmt":"2008-08-14T19:15:10","slug":"node-responsibility-trust-level-in-oracle-applications-e-business-suite-11ir12","status":"publish","type":"post","link":"https:\/\/onlineappsdba.com\/index.php\/2008\/08\/14\/node-responsibility-trust-level-in-oracle-applications-e-business-suite-11ir12\/","title":{"rendered":"Node \/ Responsibility Trust Level in Oracle Applications (E-Business Suite 11i\/R12)"},"content":{"rendered":"

\"Node<\/a><\/p>\n

Node<\/strong> or Responsibility Trust Level<\/strong> : is profile option<\/strong>, to restrict access to set of responsibilities based on Web Server<\/strong> from which user logs in.<\/p>\n

This profile option can take one of three values –
\n—Administrative<\/strong>
\n—Normal<\/strong> (Default Value)
\n—External<\/strong><\/p>\n

Lets suppose E-Business Suite (11i\/R12) is deployed with four middle tier<\/strong> where two nodes (node1 & node2) are internal<\/strong>(for intranet<\/font> users) and two nodes (node3 & node4) are external (for internet<\/font> users – iSupplier, iProcurement, iRecruitment..).\u00a0\u00a0<\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 You (or Security Team) want that users coming from external machine<\/strong> (node3 & node4) should see only selected responsibility (assume resp1<\/strong> and resp2<\/strong>). You could achieve this using profile option “Node Trust Level<\/strong> & Responsibility Trust Level<\/strong>”<\/p>\n

.
\n1.<\/strong> Set Profile Option “Node Trust Level<\/strong>” at Server level<\/strong> (for External Nodes i.e. node3 & node4) to “External<\/strong>” – Leave value of this profile option at “Site Level” to “Normal”<\/font>
\n2.<\/strong> Set Profile Option “Responsibility Trust Level<\/strong>” at Responsibility Level<\/strong> (for resp1 & resp2) to “External<\/strong>” – Leave value of this profile option at “Site Level” to “Normal”<\/font>
\n3<\/strong>. Bounce external middle tier (Restart Apache using adapcctl.sh<\/strong>).<\/p>\n

Assume users1 <\/strong>with access to responsibility; resp1, resp2, resp3, resp4 try to login
\n1. If User, user1 login from external node<\/strong> (node3 & node4)\u00a0 : \u00a0user1 can only see<\/strong> two responsibility (resp1 & resp2)<\/p>\n

2. If same User, user1 login from internal node<\/strong> (node1 & node2) :\u00a0user1 can see all four<\/strong> responsibility (resp1, resp2, resp3 & resp4)<\/p>\n

.
\nThings good to know<\/font><\/u><\/strong>
\nIf you set “Node Trust Level<\/strong>”\u00a0value to\u00a0external, for any node, this will create URL Firewall (url_fw.conf<\/strong>) for that particular node. If you wish to know more about\u00a0Apps URL Firewall<\/strong> check my previous post here<\/a><\/p>\n

.<\/p>\n

Reference<\/font><\/u><\/strong><\/p>\n