Search for existing answers to your product and support questions.
Familiarize yourself with our support site and learn best practices in working with our team.
Manage Service Requests, View and update service requests submitted by you and others in your organization.
Submit a new issue to our technical support team.
Oracle B2C Service insights from our Technical Support team subject matter experts
Browse resources to assist you in launching your implementation and ensure a successful go-live.
Access your OCI account.
Find product documentation for supported versions of B2C and documentation libraries for related service solutions.
You will have the tools to improve your customers' experience when you learn about all the things our products can do.
Find links for API documentation, Custom Processes, Customer Portal, and Agent Browser UI Extensibility Framework.
Explore how accelerators are designed to demonstrate how an integration scenario could be built using the public integration and extension capabilities of the Oracle B2C Service.
Prepare for a successful transition by reviewing upcoming release changes and enhancements.
Explore webinars, events, and feature kits to learn about B2C Service features, functionality, and best practices from the technical experts.
Oracle MyLearn offers a portfolio of free and paid subscription-based learning resources to help you gain valuable skills, accelerate cloud adoption, increase productivity, and transform your business.
Empower your team with the skills to implement, configure, manage, and use your applications with Customer Experience Cloud Training.
Our goal is to facilitate a friendly, supportive environment where members can easily collaborate with each other on solutions and best practices.
Ask and answer questions specific to B2C.
This is an exciting resource intended to help with your Oracle Service Cloud Analytics.
Share product improvement ideas and enhancement requests with Oracle Development, while collaborating with other Oracle customers and partners.
Update your phone number, email notification preferences, and severity 1 and severity 2 contact preferences.
View the contact managers within your organization.
Find contact information of the Technical Account Manager (TAM) and Client Success Manager (CSM) for your organization.
Environment:
Oracle B2C Service May 2013 and newer
Resolution:
There is a hidden configuration setting which maps profile permissions to SOAP and REST API permissions:
SERVER_ACCESS_CONTROL_ENABLED - This setting specifies whether server-side access control enforcement is enabled. - This setting is enabled by default for all new sites, but is disabled on some older sites.
If this setting is enabled and the user does not have access or permission to a specific object as configured in their profile (example: incidents), they will not be able to make a SOAP or REST request on the object. The profile permissions for the account are also enforced. For example, if the profile for the API account does not have Delete permissions for incidents, the DELETE REST request will fail with a 403 http status code and a message that indicates 'Not Allowed: No permission granted to Destroy Incident'.
As this setting is hidden, if you would like it to be enabled submit a service request to Ask Technical Support, but please take these facts into consideration before doing so:
1. It will affect all your current integrations 2. Once enabled, it cannot be disabled
It is highly recommended that you test its implications on a test site before enabling it on your production site.