IT32915: DELETION OF COMMUNITIES POSSIBLE WITHOUT ACCESS

APAR status

• Closed as program error.

Error description

• You can delete communities without having
  access.
  
  As per the functionality, every file gateway user
  has access to community. The delete link for a community is
  displayed only if the community doesn't have any partner/s
  associated with it.
  
  Using Burp Suite you can
  pass the community id of any of the available community
  and
  delete it irrespective of its association with partner.
  

Local fix

• B2BISFG-52415
  

Problem summary

• Users Affected:
  All
  
  Problem Description:
  
  You can delete communities without having access.
  
  
  As per the functionality, every file gateway user has access to
  community. The delete link for an community is displayed only if
  the community doesn't have any partner/s associated with it.
  
  Using Burp Suite you can  pass the community id of
  any of the available community
  and delete it irrespective of its association with partner/s
  
  Platforms Affected:
  All
  

Problem conclusion

•  Resolution Summary:
  A code fix is provided.
  Check if the community has associated partner/s with it and if
  its present the community will
  not be deleted giving appropriate message .
  
  Delivered in:
  5020603_15
  6000005
  5020605_3
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  STR B2B INTEGRA

• Fixed component ID

  5725D0600

Applicable component levels