JR43426: CMVC 223675 - ALLOW AN AUTHORIZED USER TO CALL REST SERVICES ON BEHALF OF ANOTHER USER.

APAR status

• Closed as program error.

Error description

• Customers wish to allow an authorized user (e.g., customer
  service representative) to make calls to REST services on behalf
  of a different user. Existing REST services currently do not
  support this.
  

Local fix

Problem summary

• USERS AFFECTED:
  WebSphere Commerce Version 7 users on Feature Pack 4 or Feature
  Pack 5 who want to allow authorized users to call REST services
  on behalf of a different user.
  
  PROBLEM ABSTRACT:
  The fix is to allow an authorized user to call REST services on
  behalf of a different user.
  
  BUSINESS IMPACT:
  Enables customers to call REST services on behalf of a different
  user.
  
  RECOMMENDATION:
  

Problem conclusion

• Add support to forUser and forUserId query parameters placed
  within the BusinessContext such that the underlying OAGIS
  service can verify permissions and allow an authorized user to
  act on behalf of a different user.
  -------------------------------------------------------------
  The latest available maintenance information can be obtained
  from the Recommended Fixes for WebSphere Commerce technote:
  http://www.ibm.com/support/docview.wss?rs=3046&uid=swg21261296
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WC BUS EDITION

• Fixed component ID

  5724I3800

Applicable component levels

• R700 PSY

     UP