IZ44379: TOPOLOGY INCOMPLETE WHEN USER IS MEMBER OF MULTIPLE GROUPS

APAR status

• Closed as program error.

Error description

• Environment: ITM 6.2.0 / fp01,02.
  OS win2003 sp2
  
  Problem Description and recreation procedure:
  Customer created an ITM group called NBG_CICS_Administrators
  with the followin
  gcharacteristics: Permissions evrything enabled except User
  admin
  modify and workspace admin mode. Applications: CICSPlex, CICSTG
  and
  CICSTG IRA Manager.Navigator assignedview only a custom view
  called
  NBG_CICS_View that displays only CICS agents.
  Customer also created a second ITM group called
  NBG_MF_Nets_View_Only
  with the following: permissions view only on evrything,
  applications:
  MF nets, MF nets sysplex, TCP/IP and VTAM. Assigned view a
  custom view
  called z/OS_MF_Net_View that displays only MF Nets agents.
  Then, customer created an ITM user (he made a user and he
  cleared out
  all his rights). Then he assigned him to both groups, so that
  user
  got all his rights from the groups and he did not get any right
  from
  his own definitions.
  The expected product behavior should be that user should have
  admin(
  full) permissions on both CICS and MF nets agents (policies,
  queries,
  situations, etc.), also he should be able to see two views (MF
  and
  CICS).
  The problem is that in reality, user could login, could see all
  CICS
  agents but he got an error when he tried to see the MF_Netsview.
  If the same user is a member of only one of the two groups, then
  everything works ok. depending on his membership, he can either
  see
  MF_Nets or administer CICS agents.
  
  N:Created windows and Unix system groups.
  With windows group having only view permissions
  on windows and UA.
  With unix group having all permissions with exactly
  similar exceptions as customer on Unix , Unix log and linux
  systems.
  Got same result "ONLY DIFFERENCe IS:
  INSTEAD OF GETTING KFWITM220E ERROR the subsystems
  in windows navigational view do not show up.
  
  I tried this recreation on 6.2 base. while customer has
  6.2 FP1.
  
  
  Related files and output:
  Traces:
  TEP clinet:
  ERROR (unit:Navigator detail) (unit:SGraphContext detail)
  (unit:Graphic
  detail) (unit:Topology detail)
  TEPS:ERROR (UNIT:ctdatabus INPUT, ERROR)
  
  Errors:
  From file PMR05883_999_726_pdcollect_teps.zip:
  TEP clinet log : for 'z/OS_MF_Net_View' errors present are :
  from
  :(4947bff6.38dce280-(null)AWT-EventQueue-0:Navigator,0,"Navigato
  r.g
  etCurrentContext()") Current Navigator context is null
  to :
  (4947bff8.2f908380-(null)AWT-EventQueue-0:Navigator.NavigatorMod
  elS
  electListener,0,"Navigator.NavigatorModelSelectListener.modelSel
  ected()"
  ) *** WORKSPACE SWITCH STARTING **** To Node: KFWITM347E
  Navigator view
  is empty RequestObjectID: null TableName: null
  
  candle.fw.model.PropertySet@4d012dbc
  -1021A               java.lang.String            PBasedModel
  -1034                java.lang.Boolean           true
  -3000                java.lang.String            GRAPH
  -1020                java.lang.String
  candle.fw.model.PBasedModel@0
  -1021                java.lang.String            NODE
  -1022                java.lang.String            KFWITM347E
  Navigator
  view is empty
  
  TEPS: W000010142_cq_4947bf59-1.log
  (4947BFB3.0001-16B4:ctdatabusmanager_i.cpp,92,"CTDataBus_i::dump
  Request"
  ) --> Request from input
  ..
  (4947BFB3.0004-16B4:ctdatabusmanager_i.cpp,93,"CTDataBus_i::dump
  Request"
  )   ---> userId      = "TEST"
  ..
  (4947BFB3.0018-16B4:ctcmwmanagedobjects.cpp,819,"CMWManagedObjec
  ts::Data
  ::prepareToAdd") No nodes available for topology request. Can
  occur if
  there is no affinity intersection, or search pattern produces no
  match.
  
  (4947BFB3.0019-16B4:ctcmwtopologyevaluator_i.cpp,915,"CTCMWTopol
  ogy_i::E
  valuator_i::Data::getTopology") NULL topology returned for
  'STATEFUL':'TOP-108.11.25-10.24.21-00006'
  (4947BFB3.001A-16B4:ctdatabusmanager_i.cpp,1053,"CTDataBus_i::Ma
  nager_i:
  :Data::executeRequest") EXCEPTION:
  ::CTTopology::TopologyTypeNotRegistered - executeRequest
  (4947BFB3.001B-16B4:ctrashelper.cpp,61,"RAS_CORBA_UserException"
  )
  EXCEPTION: CORBA User Exception has occurred
  

Local fix

• If the user has 'All Applications' assigned - then all works
  fine
  indeed.
  If the user is member of only 1 group (either group), all works
  fine
  too.
  The problem occurs only if the user is a member of both groups
  at the
  same time.
  

Problem summary

• When a user is assigned to multiple groups, the product affinity
  of each group is assigned to the user as separate elements.
  Separate elements in the user's affinity are assumed to be of
  new style affinity which have a shorter area for system bits.
  When prcessing the affinity for an intersect, the version and
  feature portions of the affinity are zeroed out.  Because of the
  differences in size of the systems portion between the old and
  new style affinities, some of the system portion were
  incorrectly zeroed out.  In the case of Mainframe Networks
  affinity which starts at position 25 in the affinity string, it
  was zeroed out, so the nodes in the navigator for the Mainframe
  Network agents would never match the affinity and would not get
  brought into the navigator tree.
  

Problem conclusion

• Changed the Affinity class to better identify new style versus
  old style affinities and zero out only appropriate areas for the
  style of affinity.
  
  This fix may correct other problems with affinities and may
  affect other agents depending on where its position is in the
  affinity string.
  
  
  The fix for this APAR is contained in the following maintenance
  packages:
  
     | fix pack | 6.2.0.3-TIV-ITM-IF0001
  

Temporary fix

• Allow all applications to the user.
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  TEPS

• Fixed component ID

  5724C04PS

Applicable component levels

• R620 PSY

     UP