PM42387: SOME USERS BELONGING TO CERTAIN GROUPS CAN NOT OPEN (RANDOMLY TM1 CONTRIBUTOR) SOME VIEWS, FROM SOME WORKFLOW NODES.

APAR status

• Closed as program error.

Error description

• Some users belonging to certain groups can not ?open some views,
  from some workflow nodes.??Security is defined as below:
  ??Customer added rules to the Approval hierarchy cube ?}
  ElementSecurity_WF_Automne?   ?Please see
  ?}ElementSecurity_WF_Automne.txt?  file ??Customer added rules
  to the Cell security tp permissions Cube
  ?}CellSecurity_}tp_application_permission}xxxxxxx? ?Please see
  ?} CellSecurity_}tp_application_permission}xxxxxxx.txt? file??-
  Customer added 'READ' right to all groups in
  }ElementSecurity_}tp_applications
          ??- Customer is using the TI process MAJ_SECU_GLOBAL to
  refresh users? security. ?? ?Please find attached: ?? How to set
  up the tests case. ?}ElementSecurity_WF_Automne.txt File
  ?CellSecurity_}tp_application_permission}xxxxxxx.txt file
  ?Customer TM1 Base. ??After several tests: ??We notice that user
  is getting this issue only when there is more than one node at
  the same level. ??The error is not reproduced when the workflow
  includes only one node OR by including the parent node???It
  seems to be a security issue. Could you please help to resolve
  this issue? ??Please Let me know if you  need any more
  information.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * All Users                                                    *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * See error description.                                       *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Upgrade to IBM Cognos TM1 9.5.2 FP1 or Upgrade to IBM Cognos *
  * TM1 10.1.0                                                   *
  ****************************************************************
  

Problem conclusion

• Code Fix
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  TM1 SERVER

• Fixed component ID

  5724W49SE

Applicable component levels

• R952 PSN

     UP