IT17996: PUREAPPLICATION SYSTEM: A RESTRICTED USER CAN VIEW THE LIST OF ALL NEW ARCHITECTURE VIRTUAL SYSTEM PATTERNS

IBM PureApplication System Version 2.2.3.0

APAR status

• Closed as program error.

Error description

• All users, including limited (restricted) users can see all
  patterns, regardless of the permission configurations of the
  patterns (restricted, available to "everyone," etc), even
  though they might actually be inaccessible to the limited user.
  
  A limited user could still see an inaccessible pattern
  that when selected, resulted in an error message ("The
  details of the pattern '****' cannot be retrieved."). For these
  patterns, the "Access granted to" field was filled with only
  one user - the pattern owner. The restricted user that was
  logged on is not in the list. Restricted users should not even
  be able to see the pattern in the list if the user does not
  have permissions to view or edit it.
  

Local fix

• Please contact IBM support.
  

Problem summary

• The plugin service utility code was assigning a role to the
  restricted user when retrieving current user information.
  

Problem conclusion

• A code fix is being provided in PureApplication System and
  BlueMix Local System version 2.2.3.0.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  PAPP SYS 8382 I

• Fixed component ID

  5725G3200

Applicable component levels

• R223 PSY

     UP