ABC Corp. uses Orade E-Business Suite Release 12 and wants to design an Order Status Web inquiry screen to make order statuses visible to its customers online. Hon can ABC Corp. ensure that customers view only their individual order statuses?

Order Status Web (OSW) restricts rows by defining “secured attributes.” When the attribute (for example, CUSTOMERID or CUSTOMERCONTACTID) is flagged as secured, the framework automatically filters query results so that the signed-on customer only sees orders whose attribute value matches his own session value. No other setup is required.

B. Hiding or excluding attributes does not perform row-level security; orders remain queryable.
C. INTERBNALCONTACTID (internal contact) is not used by OSW for customer data filtering.
D. Giving every customer the same CUSTOMERCONTACTID eliminates, rather than enforces, data security.

1. Oracle Order Management Implementation Guide R12.1, “Order Status Inquiry – Securing Attributes,” pp. 5-46–5-48, Part No. B31703-03.

2. Oracle E-Business Suite Developer’s Guide R12.1, ch. 24 “Securing Attributes,” pp. 24-3–24-5, Part No. B31047-02.