PM29273: PERMISSION BECOME UNAVAILABLE AND THEN ARE REMOVED WHEN POLICY CHANGES ARE MADE WHEN YOU HAVE NOT LOGGED INTO ALL NAMESPACES

APAR status

• Closed as program error.

Error description

• Permission restrictions are not maintained when modifications to
  the Policies (permisions) are made when all namespaces available
  have not been logged into. ??We start by restricting access to a
  folder/package/report in Cognos connection by modifying the
  permissions of the item. We restrict deny access to a user in
  Namespace A. ??We then logoff and log into different namespace
  (Namespace B). We then go back into the permissions. We now see
  the items coming from Namespaces A (which we have not logged
  into) the item is listed as unavailable and is not identified.
  We then proceed to modidy the permissions (policies) by added a
  group from Namespace B. The item then shows up under the list of
  permissions as expected. We accept the changes by clicking OK.
  ????We then log off and log back into Namespace A. We go back
  into the permissions of the item. The permissions we had
  previously set for this namespace are no longer listed. ????We
  do see the last permission change from Namespace B which is
  listed as Unavailable as we have not logged into it's Namespace.
  ????We then log off of Namespace A and login to Namespace B.
  Again the permissions list an item as unavailable. The item is
  seemingly invalid. ????We logoff of Namespace B then log back
  into Namespace B againg. Now both restrictions no longer show
  up. ????No retrictions are applied. ??In this scenario the
  namespaces themselves have been granted full access to the item
  question and retrictions applied with the above action.   The
  sequence of events cause the restrictions to be voided and
  removed. ??Therefore all users have access.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * All Users                                                    *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * See error description.                                       *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Upgrade to IBM Cognos Business Intelligence 10.1 Refresh     *
  * Pack 1 or Upgrade to IBM Cognos 8 Business Intelligence      *
  * 8.4.1 Fix Pack 4                                             *
  ****************************************************************
  

Problem conclusion

• Code Fix
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  COG8 BI SECURIT

• Fixed component ID

  5724W12SE

Applicable component levels

• RA11 PSN

     UP