PI74231: DELETED SECURITY TYPES STILL SHOW AS ASSIGNABLE

APAR status

• Closed as program error.

Error description

• When a security Type is deleted, such as a Component Type,
  Application Type, etc, any user (except "admin") who previous
  had access to create with that Resource Type can still do so.
  This can result in "Cannot add new mappings to deleted resource
  roles."
  
  To reproduce:
  
  - Create a security type for components.
  - Give a security role such as the built-in "Administrator"
  role, all security permission on the new security type.
  - Delete the type.
  - As a user who had permissions on the new security type
  (someone from the "Administrator" role, if you used that role
  above), try to create a component.
  - Notice that the deleted security type appears in the UI for
  all teams that user has access to.
  - If you try to proceed, you will get a "Cannot add new mappings
  to deleted resource roles." error.
  

Local fix

• n/a
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * N/A                                                          *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * When a security Type is deleted, such as a Component Type,   *
  * Application Type, etc, any user (except "admin") who         *
  * previous                                                     *
  * had access to create with that Resource Type can still do    *
  * so.                                                          *
  * This can result in "Cannot add new mappings to deleted       *
  * resource                                                     *
  * roles."                                                      *
  *                                                              *
  * To reproduce:                                                *
  *                                                              *
  * - Create a security type for components.                     *
  * - Give a security role such as the built-in "Administrator"  *
  * role, all security permission on the new security type.      *
  * - Delete the type.                                           *
  * - As a user who had permissions on the new security type     *
  * (someone from the "Administrator" role, if you used that     *
  * role                                                         *
  * above), try to create a component.                           *
  * - Notice that the deleted security type appears in the UI    *
  * for                                                          *
  * all teams that user has access to.                           *
  * - If you try to proceed, you will get a "Cannot add new      *
  * mappings                                                     *
  * to deleted resource roles." error.                           *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  

Problem conclusion

• Fixed in UCD 6.2.5.2
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  UC DEPLOY

• Fixed component ID

  5725M5400

Applicable component levels

• R625 PSY

     UP