IZ83168: PROBLEM ATTACHING POLICY VIA CLASSIFICATION

Tivoli Security Policy Manager Version 7.1, Fix Pack 4, 7.1.0-TIV-ITSPM-FP0004

APAR status

• Closed as program error.

Error description

• Excerpt from email from Craig F
  
  "As you may recall, if we attach policy via classifications then
  the policy is applicable for all actions.  To achieve this, we
  take advantage of an XACML mechanism by which omitting the
  <Actions> in the Target means the policy never checks for action
  and is hence applicable to all actions.  However, for
  entitlements we rely on pulling all known values for the
  action-id out of the policy itself.  If only classifications are
  used to attach policy, then we don't have any actions in the
  policy at all, which means we can't create the returned
  entitlements object."
  

Local fix

• N/A
  

Problem summary

• Unable to attach policy via classification.
  

Problem conclusion

• The fix for this APAR is expected to be cont
  ained in the following maintenance delivery vehicle:
  | fix pack | 7.1.0-TIV-TSPM-FP0001
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  TSPM POLICY MGM

• Fixed component ID

  5724S24PM

Applicable component levels

• R710 PSN

     UP