PI36218: CANNOT CREATE ENVIRONMENT IF RESOURCE TEMPLATE WAS DELETED

IBM UrbanCode Deploy Fix Pack 3 (6.1.1.3) for 6.1.1
IBM UrbanCode Deploy Fix Pack 4 (6.1.1.4) for 6.1.1
IBM UrbanCode Deploy Fix Pack 5 (6.1.1.5) for 6.1.1
IBM UrbanCode Deploy Fix Pack 6 (6.1.1.6) for 6.1.1
IBM UrbanCode Deploy Fix Pack 7 (6.1.1.7) for 6.1.1
IBM UrbanCode Deploy Fix Pack 8 (6.1.1.8) for 6.1.1
IBM UrbanCode Deploy iFix 1 for 6.1.1.7
IBM UrbanCode Deploy iFix 2 for 6.1.1.8

APAR status

• Closed as program error.

Error description

• Steps to reproduce (all as a non-admin user):
  
  1) Create a resource template
  2) Create a blueprint from the resource template
  3) Create an environment from the resource template (succeeds)
  4) Delete the resource template
  5) Create a new environment from a blueprint who had the deleted
  template as an ancestor
  
  Result: the following error will be thrown:
  
  User 'myUser' does not have read permission to a
  ResourceTemplate: myResourceTemplate
  
  There might be other scenarios that produce this error, and the
  root cause is the same: as part of creating an environment, all
  resources created from blueprints will be synced to make sure
  they are compliant with the blueprint. To do this the server
  checks through the blueprints and templates, however, the user
  does not have permission to view a deleted template. Instead of
  skipping over this template, instead an error is thrown.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * All                                                          *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * Steps to reproduce (all as a non-admin user):                *
  *                                                              *
  * 1) Create a resource template                                *
  * 2) Create a blueprint from the resource template             *
  * 3) Create an environment from the resource template          *
  * (succeeds)                                                   *
  * 4) Delete the resource template                              *
  * 5) Create a new environment from a blueprint who had the     *
  * deleted                                                      *
  * template as an ancestor                                      *
  *                                                              *
  * Result: the following error will be thrown:                  *
  *                                                              *
  * User 'myUser' does not have read permission to a             *
  * ResourceTemplate: myResourceTemplate                         *
  *                                                              *
  * There might be other scenarios that produce this error, and  *
  * the                                                          *
  * root cause is the same: as part of creating an environment,  *
  * all                                                          *
  * resources created from blueprints will be synced to make     *
  * sure                                                         *
  * they are compliant with the blueprint. To do this the server *
  * checks through the blueprints and templates, however, the    *
  * user                                                         *
  * does not have permission to view a deleted template. Instead *
  * of                                                           *
  * skipping over this template, instead an error is thrown.     *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Upgrade to UCD version 6.1.1.3                               *
  ****************************************************************
  

Problem conclusion

• Fixed in UCD version 6.1.1.3
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  UC DEPLOY

• Fixed component ID

  5725M5400

Applicable component levels

• R600 PSN

     UP

• R600 PSY

     UP

• R601 PSN

     UP

• R601 PSY

     UP

• R610 PSN

     UP

• R610 PSY

     UP

• R611 PSN

     UP

• R611 PSY

     UP