With a new configuration option in SAS® Enterprise GRC, you can change the confidentiality code of an incident during incident validation. This capability enables you to control incident visibility during different stages of validation.

To enable this capability, specify the following configuration property in the configdata.properties file:

When the capability is enabled, the validation state determines the value of the confidentiality code, according to the following:

• When the validation state is "Not Submitted" or "Returned to Originator," the confidentiality code is set to 1.
• When the validation state is "Submitted," the confidentiality code is set to 2.
• When the validation state is "Fully Validated," the confidentiality code is set to 3.

Click the Hot Fix tab in this note to access the hot fix for this issue.

Operating System and Release Information

A fix for this issue for SAS Enterprise GRC 6.1 is available at: