IT29288: USERS CANNOT ACCESS STORAGE INSIGHTS. "YOUR IBM ID IS VALID, BUT YOU ARE NOT AUTHORIZED TO USE STORAGE INSIGHTS."

APAR status

• Closed as program error.

Error description

• Users cannot access Storage Insights after adding new users.
  Users are getting the following error when trying to access
  Storage Insights:
  
  "IBM Storage Insights Your IBM ID is valid, but you are not
  authorized to use Storage Insights. Contact your administrator
  for help." The users are showing as active in the webapp.
  
  traceWebServer_errors_0.log
  [RoleFilter.doFilter] [ERROR] Unable to get role for <email>for
  URI: /rsm/gui
  [RoleFilter.doFilter] [ERROR] Unable User <email> does not have
  an assigned role in   null.
  
  An error occurred (e.g. problem accessing the database) when the
  cache was refreshed after adding the users and as a result the
  cache was emptied and remained empty.  This prevented users from
  logging in.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * IBM Spectrum Control & Storage Insights users who frequently *
  * add/remove/modify users/groups in SC or SI.                  *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * Users cannot access Storage Insights after adding new users. *
  * Users are getting the following error when trying to access  *
  * Storage Insights:                                            *
  *                                                              *
  * "IBM Storage Insights Your IBM ID is valid, but you are not  *
  * authorized to use Storage Insights. Contact your             *
  * administrator                                                *
  * for help." The users are showing as active in the webapp.    *
  *                                                              *
  * traceWebServer_errors_0.log                                  *
  * [RoleFilter.doFilter] [ERROR] Unable to get role for         *
  * <email>for                                                   *
  * URI: /rsm/gui                                                *
  * [RoleFilter.doFilter] [ERROR] Unable User <email> does not   *
  * have                                                         *
  * an assigned role in   null.                                  *
  *                                                              *
  * An error occurred (e.g. problem accessing the database) when *
  * the                                                          *
  * cache was refreshed after adding the users and as a result   *
  * the                                                          *
  * cache was emptied and remained empty.  This prevented users  *
  * from                                                         *
  * logging in.                                                  *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  The users and groups authorized to access WebUI are kept in a
  cache.
  
  When users/groups are added/deleted that cache is refreshed
  and most of the time this works fine. However, if an exception
  (e.g problems accessing the database) occurs during this
  operation, then the cache is emptied and it remains empty.
  

Problem conclusion

• The fix for this APAR is targeted for the following release:
  
  IBM Storage Insights 3Q19   [ 5.3.4-IBM-SC ]
  IBM Spectrum Control 5.3.4   [ 5.3.4-IBM-SC ]
  
  ( release target September 2019 )
  
  http://www.ibm.com/support/docview.wss?&uid=swg21320822
  
  The target dates for future releases do not represent a formal
  commitment by IBM. The dates are subject to change without
  notice.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  STORAGE INSIGHT

• Fixed component ID

  5608TPCSI

Applicable component levels