IBM Support

IV85141: Migrated security groups containing '/Organizations' & '/Geography' data access values may not work

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as fixed if next.

Error description

  • If you import a security group through object migration into a
    target environment and one or the both of the following
    are true:
    
    - 'System Organization' in the imported group is set to
      '\Organizations'
    
    - 'System Geography' in the imported group is set to
      '\Geography'
    
    ... the 'System Organization' and 'System Geography' values
    within the imported group may be set incorrectly if a
    record in the system (e.g. a Data Set Load record) exists that
    has the same published name as '\Geography' or
    '\Organizations.'
    
    If this problem happens, users assigned to a security group will
    not seeing the data they expect to see within queries and
    reports and metric reports will not render at all.
    

Local fix

  • Go into the imported the imported security group,
    clear the group's 'System Organization' and/or 'System
    Geography' values, and reset them to the the correct values
    (e.g. then reset 'System Organization' to '\Organizations' and
    reset 'System Geography' to '\Geography.')
    
    To prevent future groups from setting the data access ('System
    Organization' and 'System Geography') incorrectly on future
    imports, rename the Data Set Load Records causing the
    problem or request a patch helper workflow from L2 support
    that can be ran that will automatically rename these records.
    

Problem summary

  • A record of a completely different type has the same name as
    "Organizations" and "Geographies"
    

Problem conclusion

  • A patch helper, workflow, and query will be made available to
    rename the as-delivered records that have the same name. The
    query will be used to help find security groups that have the
    geo or org set to the incorrect record type.  This is targeted
    to 2H2016.
    

Temporary fix

Comments

APAR Information

  • APAR number

    IV85141

  • Reported component name

    TRI APP PLTFM R

  • Reported component ID

    5725F26RE

  • Reported release

    350

  • Status

    CLOSED FIN

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2016-05-24

  • Closed date

    2016-05-26

  • Last modified date

    2016-06-22

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Modules/Macros

  •    None
    999
    

Fix information

Applicable component levels

[{"Business Unit":{"code":"BU048","label":"IBM Software"}, "Product":{"code":"SSCZPUQ","label":"IBM TRIRIGA Application Platform Runtime Engine"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"350","Edition":""}]

Document Information

Modified date:
22 June 2016