DPAS SCR: 01835



  • SCR Number
    01835
  • Title
    Limit CICP data visibility by Commodity DoDAAC or Contract
  • DPAS Module
    Materiel Management
  • Reporting Organization
    USAF GFM-A
  • State
    New
  • History
    Submitted 10/25/2022
  • Description
    Description:
    The DPAS Catalog is established at the Logistics Program level today.  Current AF CICP users have access to the entire catalog and stock item list under the AF CMP GFP Logistics Program.  There are no access controls on the DPAS catalog other than role-based controls.  DPAS should limit CICP access to only their data, as designated by commodity types, DoDAAC and/or contract number.
     
    Recommended:
    Create a sub-catalog for each AF CICP; to record stock number entries at the ICP and Materiel Mgt Program levels.  Make use of the commodity types, DoDAACs and/or contract numbers in DPAS to limit use and viewing at the contract level.  This will prevent everyone from seeing every stock number and standard price in DPAS warehouse.
     
    Mission Critical:
    The problem leaves the DPAS catalog open to all users.  It is mission critical that CICPs cannot have access to other CICP data including stock numbers and standard prices.
     
    Benefits:
    Implementing this solution will prevent all users from seeing every stock number and standard price in the DPAS catalog and DPAS warehouse receiving process.
     
    Users:
    All AF GFM-A users of DPAS