IV52939: LOCATIONS OF ALL SITES VISIBLE WHEN ENTERING A SR

APAR status

• Closed as duplicate of another APAR.

Error description

• Locations of all sites visible when entering a SR
  
  
  We just upgraded from Maximo 7.1.1.6 (Unix environment) to
  7.1.1.10 (Windows environment).
  
  Since the upgrade there is a problem with the locations list in
  the Create Service Request application:
  
  when entering a Service Request and opening the list of
  locations, not only the locations of the site of the user are
  shown but also the locations of the other sites! This was not
  the case in version 7.1.1.6.
  
  
  Tested on 7116 and 71110
  
  Maximo Base Services 7.1.1.10-LA20120511-1201 Build
  20111021-2230 DB
  Build V71110-16
  
  Below are pre-requiste steps required to ensure correct
  reproduction of issue:
  
  
  1. Login as Maxadmin user
  
  2. In Users application, create a new user and accept creating
  new Person record for this user.
  
  
  i.e.
  User: Joeboggs
  
  3. Go to Security Groups application and bring up SELFSERVICE
  group.
  
  This group does not have any Sites listed under the Sites tab.
  Also on Applications tab, filgtering Main Object/Table: "The SR
  view" ensures you have access to the Service Request app to
  create new Service Requests.
  
  4. Duplicate this group from Select Action menu option.
  
  New Group Name: TESTGRP
  
  5. Under the last Users tab, add user, Joeboggs, created in step
  2. Back in Users application, Groups tab, this user will now be
  listed as belonging to TESTGRP.
  
  
  
  
  6. In Security Groups app, under Sites tab, for Group TESTGRP,
  add
  BEDFORD as the only site this user has access to.
  
  7. Go to Administration module -> Resources app -> People
  
  8. Bring up record for user Joeboggs
  
  9.  Check Status is Active & update the following fields with
  values:
  
  Person's Site field has value: BEDFORD
  Person's Location: BOILER
  Default location to Service Request = activated by enabling tick
  option
  
  10. Logout as maxadmin user
  
  8. Login as new user, Joeboggs
  
  9. Go to Profile \ Personal Information and ensure user has
  default site: BEDFORD
  
  
  Now for the actual steps:
  
  1) Go to Self Service \ Service Requests -> Create Service
  Request
  2) Clear default Click Select Value on the Location and Filtered
  By: All
  
  1 - 15 of 207 Pages are confirmed on BEDFORD site.
  
  3) Filter for any site that the user does not belong to and
  click
  Refresh button  :
  
  WOKING, FLEET, DENVER
  
  No results are returned as expected
  
  4) Press enter or Filter for Site user only belongs to: BEDFORD.
  
  And as expected 1 - 15 of 207 Pages are  confirmed on BEDFORD
  site.
  
  
  5) Now logout & log back in as user MAXADMIN
  
  6) Go to Administration module -> Resources app -> People :
  Joeboggs
  
  7) Update the following fields:
  
  Person's Site field has value: BEDFORD
  Person's Location:
  Default location to Service Request = De-activated, No tick
  option enabled
  
  
  8) Logout as maxadmin user & Log back in as: Joeboggs
  
  9) Repeat steps 1, 2 and 3. Notice that now you get:
  
  1 - 15 of 298 Pages is confirmed.
  
  10) Filter for any site that the user does not belong to:
  
  WOKING, FLEET, DENVER
  
  Results are returned for these Sites despite the fact that user
  only belongs to Site: BEDFORD.
  
  
  The only tickbox that matters is the field: "Default location to
  Service Request"
  

Local fix

• Workaround:
  
  Restrict the location field in the CREATESR application.
  
  In the security group application, if you create an object level
  data restriction, you can restrict the user to the sites you
  wish to grant them access to".
  

Problem summary

Problem conclusion

Temporary fix

Comments

• This APAR is a duplicate of IV52892
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels