IC85473: MOVING A FILE INTO A SECURED DIRECTORY CAUSES IT TO BECOME INACCESSIBLE ON WINDOWS

WebSphere MQ V7.5 Fix Pack 7.5.0.1

APAR status

• Closed as program error.

Error description

• On Windows, if a file is created outside of the File Transder
  config directory tree and then moved into that tree (for
  example, into an agent's config directory) the file's
  permissions are set such that neither the agent nor user can
  access it.
  
  The following error may be observed:
  
  BFGPR0046E: A problem has occurred while attempting to open the
  C:\Program Files\IBM\WebSphere
  MQ\mqft\config\MFTCOORD\agents\MFTQM2CDBRIDGE\ConnectDirectCrede
  ntials.xml XML file. The internal MQMFT data has not been
  updated. The details of the error are: C:\Program
  Files\IBM\WebSphere
  MQ\mqft\config\MFTCOORD\agents\MFTQM2CDBRIDGE\ConnectDirectCrede
  ntials.xml (Access is denied.)
  
  A secondary symptom of this problem may be that the user who
  created and moved the file will also not be able to access the
  file and will, for example, get a similar "Access Denied" error
  when opening the file in a text editor.
  

Local fix

• A workaround for this problem is to initially create the file
  directly under the File Transfer directory tree so that the
  filethen has the correct permissions associated with it.
  Alternatively if you have already moved a file to the
  File Transfer config directory tree and are now
  encountering the "Access Denied" error, you can still
  edit the file's security permissions to make the file
  editable again. Setting the recommended level of security
  permissions on the file should allow both editing by the
  owning user and reading of the config by the agent.
  

Problem summary

• ****************************************************************
  USERS AFFECTED:
  All users of WebSphere MQ File Transfer Edition Version 7.5.0
  
  
  Platforms affected:
  Windows
  
  ****************************************************************
  PROBLEM SUMMARY:
  Because files placed into the secured directory hierarchy were
  not configured to inherit permissions from the directory, the
  default permissions given to the files could render the files
  inaccessible to either the agent or the user which placed them
  there.
  

Problem conclusion

• The code has been altered to ensure that file placed into the
  secured directory inherit the permissions from that directory,
  thereby ensuring that the appropriate users can access the
  files.
  
  ---------------------------------------------------------------
  The fix is targeted for delivery in the following PTFs:
  
  Platform           v7.5
  --------           --------------------
  Multiplatforms     7.5.0.1
  
  The latest available maintenance can be obtained from
  'WebSphere MQ Recommended Fixes'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006037
  
  If the maintenance level is not yet available information on
  its planned availability can be found in 'WebSphere MQ
  Planned Maintenance Release Dates'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006309
  ---------------------------------------------------------------
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WMQ FTE

• Fixed component ID

  5724H7242

Applicable component levels

• R750 PSY

     UP