Community Menu

KBACE Login

Oracle E-Business Suite Blog

Information and Articles related to the Oracle E-Business Suite

Profile "Guest User Password" obsolete in R12.1

Posted by: Vinith Venbakkam in Untagged  on Print PDF

Vinith Venbakkam

The storage of Guest user information is moved from a profile option (GUEST_USER_PWD) to the vault (for security purpose), all the product teams should be aware of this change and they need to modify their code appropriately to refer this new storage to get GUEST user information.

There is no functional impact with these changes as all the ATG code that is referring GUEST_USER_PWD to read guest user information needs to be changed to call FND's new api to fetch the information from vault.

-- Verify the Applications Version
  select fnd_release.major_version from dual;

Example Answer : 12

  select fnd_release.minor_version from dual;

Example Answer : 1

-- Verify the profile option "Guest User Password" no longer exists
  select 1 from fnd_profile_options where
  profile_option_name='GUEST_USER_PWD';

Example Answer : no rows

-- Validate the GUEST user login using FND APIs
  select fnd_web_sec.validate_login('GUEST','ORACLE') from dual;

Example Answer : Y

-- Verify the GUEST user login from the VAULT
  select fnd_vault.get('FND', 'GUEST_USER_PWD') from dual;

Example Answer : GUEST/ORACLE

-- Verify the afdelgstusrpwd.sql file version (used to delete the old profile)
  select f.FILE_ID, f.APP_SHORT_NAME "TOP", f.SUBDIR, f.FILENAME,
  v.VERSION, v.LAST_UPDATE_DATE
  from ad_files f, ad_file_versions v 
  where f.FILE_ID=v.FILE_ID
  and f.FILENAME = 'afdelgstusrpwd.sql'
  order by 6 desc

Example Answer : FND patch/115/sql/afdelgstusrpwd.sql 120.1

In R12.1, FND now provides an API to get the guest user information (username/password) from the vault called : 
FND_WEB_SEC.GET_GUEST_USERNAME_PWD
All the product code that was earlier calling FND_PROFILE.VALUE(‘GUEST_USER_PWD') to read guest user information from profile store must now call FND's new api (FND_WEB_SEC.GET_GUEST_USERNAME_PWD) to get the information.
Similarly the java code that was earlier using profile store to get guest user information must now either write a wrapper over the FND API :  
   FND_WEB_SEC. GET_GUEST_USERNAME_PWD 
or
   Guest.getInstance().getUser() and Guest.getInstance().getPwd
where Guest is FND's class : oracle.apps.fnd.common.Guest.

Reference  - Metalink Note # 788979.1

Comments (1)Add Comment
Rochak Mehrotra
...
written by Rochak Mehrotra, December 08, 2011
Thanks Vinith for sharing this in detail as to why R12.1 doesnt have the profile option for GUEST_USER_PWD, I actually was searching for GUEST_USER_PWD profile option and came across your blog.
BTW , good to see you after Oracle Onlinedba days!

Write comment
You must be logged in to post a comment. Please register if you do not have an account yet.

busy