PK66822: When using nested workspaces, the login stack is storing the incorrect user

APAR status

• Closed as program error.

Error description

• When using a nested workspace, for example in a JSP component,
  the login stack stores the incorrect user. This means that after
  using a system workspace, the admin user is stored inside the
  session, even on public pages. In this case resource (e.g.
  images) are referenced via the myconnect servlet instead of
  the connect servlet. Thus, the resources cannot be displayed,
  since anonymous users cannot access the myconnect servlet.
  

Local fix

Problem summary

• After using a nested workspace (e.g. using WCM API to obtain a
  workspace inside a JSP component) the session contains a wrong
  user object. Especially after using a system workspace, the
  admin user is stored inside the session, even on public pages.
  In this case resource (e.g. images) are referenced via the
  myconnect servlet instead of the connect servlet. Thus, the
  resources cannot be displayed, since anonymous users cannot
  access the myconnect servlet.
  

Problem conclusion

• The method WCM_Utils.doJCRLogin is storing the workspace user in
  local data instead of the current session user.
  This way WCM_Utils.doJCRLogout restores the wrong user object to
  the session.
  
  Failing Module: WCMAPI - WCM APIs
  
  Problem Solution:
  
  Fixed the code in WCM_Utils.doJCRLogin.
  
  Affected Users: All users using nested workspaces.
  
  Requisites:
     pre-requisite Portal Component: WCM 6.0.1.3 GA build 22.5
     pre-requisite interim fixes: PK65198 (these also pre-req:
  PK58104, PK63526, PK61567, PK60048, PK61932, PK61499, PK60451,
  PK66293, PK61982, PK59668, PK61318, PK57493, PK63605, PK66391,
  PK65718, PK63393, PK62526, PK60449, PK61633, PK62955, PK61291,
  PK60885, PK62960, PK60501, PK63616, PK65853, PK63092, PK60854,
  PK61417, PK63097, PK63837, PK62226, PK65160, PK64828, PK66368,
  PK59241, PK64155, PK64937, PK63257, PK60089, PK64729, PK61637,
  PK63289, PK66641, PK61009, PK60239, PK65211, PK58305, PK61167,
  PK62089, PK60860, PK63646)
  
  Platform Specific: No
  
  Fix pack: This fix will be integrated into WP 6.0.1.4
  
  A fix is available from Fix Central:
  http://www.ibm.com/eserver/support/fixes/fixcentral/swgquickord
  er?brandid=2&productid=Workplace%20Web%20Content%20Management&fi
  xes=6.0.1.3-WCM-PK66822
  
  You may need to type or paste the complete address into your Web
  browser.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WRKPLC WEB CON

• Fixed component ID

  5724I2900

Applicable component levels

• R60G PSY

     UP