PI54717: CQWEB 8.0.1 RESTRICTED USERS WHO CANNOT SUBMIT RECORDS ARE ABLE TO CREATE A NEW QUERY.

Rational ClearQuest Fix Pack 12 (8.0.1.12) for 8.0.1
Rational ClearQuest Fix Pack 2 (9.0.0.2) for 9.0
Rational ClearQuest Fix Pack 13 (8.0.1.13) for 8.0.1
Rational ClearQuest Fix Pack 3 (9.0.0.3) for 9.0
Rational ClearQuest Fix Pack 14 (8.0.1.14) for 8.0.1
Rational ClearQuest Fix Pack 4 (9.0.0.4) for 9.0
Rational ClearQuest Fix Pack 15 (8.0.1.15) for 8.0.1
Rational ClearQuest Fix Pack 5 (9.0.0.5) for 9.0
Rational ClearQuest Fix Pack 16 (8.0.1.16) for 8.0.1
Rational ClearQuest Fix Pack 6 (9.0.0.6) for 9.0
Rational ClearQuest Fix Pack 17 (8.0.1.17) for 8.0.1
Rational ClearQuest Fix Pack 18 (8.0.1.18) for 8.0.1
Rational ClearQuest Fix Pack 19 (8.0.1.19) for 8.0.1
Rational ClearQuest Fix Pack 20 (8.0.1.20) for 8.0.1
Rational ClearQuest Fix Pack 21 (8.0.1.21) for 8.0.1
Rational ClearQuest Fix Pack 22 (8.0.1.22) for 8.0.1
Rational ClearQuest Fix Pack 23 (8.0.1.23) for 8.0.1
Rational ClearQuest Fix Pack 24 (8.0.1.24) for 8.0.1
Rational ClearQuest Fix Pack 25 (8.0.1.25) for 8.0.1

APAR status

• Closed as program error.

Error description

• Restricted users who cannot submit records are able to create a
  new query.
  
  To reproduce the behavior with a SAMPL defect tracking database:
  Set up Site Configuration>Security Options so that user "lead"
  is a Restricted user that can only run "All Defects" query.
  
  Out of the box, the restricted user can run the query, submit
  records, but cannot create a new query.
  
  Then, create a user group that contains everyone except "lead"
  and set the submit action to "User Groups" where that new group
  is the only one able to submit records.
  
  Log in as "lead" - the user can no longer create a record, and
  is able to run "All Defects" but now has the ability to create a
  new query that cannot be saved.  The user should not be able to
  create a new query - only run the query defined by the Security
  Options.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * ClearQuest Web                                               *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * ClearQuest Web restricted users who are not allowed to       *
  * submit records are able to create new queries.               *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  

Problem conclusion

• A fix is available in ClearQuest 8.0.1.12 and 9.0.0.2
  ClearQuest Web restricted users who are not allowed to submit
  records are no longer allowed to create new queries either.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  CLEARQUEST WIN

• Fixed component ID

  5724G3600

Applicable component levels

• R801 PSY

     UP