IZ79619: QUERY RESULTS ARE INCOMPLETE WHEN THE $CURRENTUSER VARIABLE HAS BEEN USED IN THE ACCESS CONTROL PERMISSION TARGET XPATH

APAR status

• Closed as program error.

Error description

• [6/16/10 18:04:52:101 GMT-06:00] 0000003e api           E
  com.ibm.sr.
  api.ServiceRegistryModifierImpl invokeModifiers java.lang.
  NullPointerException
   at com.ibm.sr.servicemodel.correlator.SMCorrelatorModifier.
  createSchemaEntity(SMCorrelatorModifier.java:1366)..............
  ..........................
  

Local fix

• Not applicable
  

Problem summary

• If a user has been given permission to retrieve an object using
  the $currentUser variable, queries they execute will not return
  the object in the results.
  
  For example:
  
  A permission is created to allow a user to retrieve WSDL
  documents that they own using the following XPath:
  
  /WSRR/WSDLDocument[@owner='$currentUser']
  
  If the user then executes a query for all WSDL documents, those
  that have an owner property value matching the user name will be
  incorrectly removed from the results.
  

Problem conclusion

• A fix has been implemented to ensure that access control will
  treat query operations in the same way as retrieve operations
  when checking the $currentUser variable so that query results
  are not incorrectly withheld.
  
  This fix has been targeted for inclusion in fix pack 3 for WSRR
  v7.0.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SERVICE REGISTR

• Fixed component ID

  5724N7200

Applicable component levels

• R700 PSY

     UP