PK86381: Restriction uploading file types is needed for ReqWeb ( RATLC012 88140)

APAR status

• Closed as program error.

Error description

• Restriction uploading file types is needed for ReqWeb
  

Local fix

Problem summary

• Description and steps to reproduce:
  In RequistePro windows native client, it allows importing
  .doc  file type only. On the other hand, in ReqWeb, it
  allows all file types to import in, includes HTML, HTM, bat,
  exe and etc.
  
  For instance, login to Reqweb, go to ?Import Document?. Then
  import ?test.bat?. The batch file will be imported
  successfully.
  
  Is the client requesting a workaround/permanent fix/testfix?
  Permanent fix
  
  What is the current impact to the client?s business?
  They are going to use ReqWeb. It is not secure enough if any
  file types can be imported.
  
  Short Description (use this as the escalation "Headline".
  This will be consistent with the PMR problem statement):
  restriction uploading file types is needed.
  

Problem conclusion

• When we try to import a word document on ReqWeb, there's not
  restrictions to import just a *.doc file, and we are able to
  import any extension file.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  REQUISITEPRO WI

• Fixed component ID

  5724G3900

Applicable component levels

• R701 PSN

     UP