IT11044: UNAUTHENTICATED USER EXCEPTIONS ACCESSING GETXSLTCLASSLOADERCACHINGVALUE

Version 8.5 Refresh Pack 7 for the IBM Business Process Manager products

APAR status

• Closed as program error.

Error description

• When using XSLT Data Maps in BPEL flows a security exception
  SECJ0305I
  may be seen due to the TransformTypeHelper class calling the
  getXSLTClassLoaderCachingValue method. This APAR relates to this
  specific case of SECJ0305I.
     This may also be observed as a result of this issue
  6/27/17 11:44:59:969 MST] 00000161 TransformType E
  com.ibm.wbiserver.transform.util.TransformTypeHelper
  getXSLTClassLoaderCachingValue  Exception
  
  javax.management.JMRuntimeException:
  ADMN0022E: Access is denied for the expandVariable operation on
  AdminOperations MBean because of insufficient or empty
  credentials.
      at
  com.ibm.ws.management.AdminServiceImpl.preInvoke(AdminServiceImp
  l.java:2
  509)
      at
  com.ibm.ws.management.AdminServiceImpl$1.run(AdminServiceImpl.ja
  va:1327)
      at
  com.ibm.ws.security.util.AccessController.doPrivileged(AccessCon
  troller.
  java:118)
      at
  com.ibm.ws.management.AdminServiceImpl.invoke(AdminServiceImpl.j
  ava:1243
  )
      at
  com.ibm.wbiserver.transform.util.TransformTypeHelper.getXSLTClas
  sLoaderC
  achingValue(TransformTypeHelper.java:539)
  

Local fix

• n/a
  

Problem summary

• ****************************************************************
  USERS AFFECTED:
  Users of Business Process Manager v8.5 who use XSLT Data Maps
  
  ****************************************************************
  PROBLEM DESCRIPTION:
  In certain security configurations a SECJ0305I error may be seen
  when trying to access the WESB_XSLT_CLASSLOADER_CACHING_VALUE.
  It is this cause of the error that is corrected.
  

Problem conclusion

• The code was changed to access this variable through a different
  route and so not cause the security exception.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WESB IN BPM

• Fixed component ID

  AIMCMFC00

Applicable component levels

• R855 PSY

     UP