RS02104: A USER WITH NO GROUP ASSIGNED SHOULD NOT BE AUTHORIZED BY DC

Operational Decision Manager V8.7.1.1: Interim Fix 39
Operational Decision Manager V8.7.1.1: Interim Fix 43
Operational Decision Manager V8.7.1.1: Interim Fix 48
Operational Decision Manager V8.8.1 Mod Pack
Operational Decision Manager V8.7.1.2 Fix Pack
Operational Decision Manager V8.8.1 Download Document
Operational Decision Manager V8.7.1.1: Interim Fix 53

APAR status

• Closed as program error.

Error description

• Because the way it is setup in the application server , Section
  Security realm of the application server of the documentation ,
  any user that is authenticated at the application server level
  is authorized by the application server as an rtsUser.
  
  If security is set properly on each project/decision service
  even though that user can login , he would not be able to see
  any of the project if he is not a member of any other group or
  if rtsUser groups is not assigned to any project
  
  If the user is not in any role or group it should simply not be
  able to login and be rejected.
  

Local fix

Problem summary

• There is no verification that a user has a role when checking
  permission
  

Problem conclusion

• The code is fixed
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Modules/Macros

• 999
  

Fix information

• Fixed component name

  WS DECISION CTR

• Fixed component ID

  5725B6900

Applicable component levels

• R871 PSY

     UP