JR44427: CMVC 224689 - TO ALLOW THE WC_PERSISTENT TO BE CLEARED WHEN A USER LOGS OFF OR TERMINATES THEIR BROWSER SESSION

7.0.0-WS-WCServer-FP009
WebSphere Commerce Version 7.0.0.7 Fix Pack
WebSphere Commerce Version 7.0.0.8 Fix Pack
WebSphere Commerce Version 7.0.0.9 Fix Pack

APAR status

• Closed as program error.

Error description

• Consider the following scenario:
  
  1.) Create a new customer segment in Management Center using the
  Marketing tool
  2.) Create a new dialog activity that will add a newly
  registered user to the customer segment
  3.) Create a promotion that will reflect a discount of some kind
  which applies to members of this customer segment (for example,
  50% off the order total)
  4.) Activate the dialog activity and promotion
  5.) Register at the storefront as a new user and log in without
  the "Remember Me" box checked
  6.) Add an item to the shopping cart
  7.) At checkout, verify the promotion is applied
  8.) Log off
  9.) Now, as a guest user, add an item to the shopping cart
  10.) Observe that the same promotion is applied. This should not
  occur since the promotion should only apply to the registered
  user.
  

Local fix

• Pass the rememberMe=false parameter to the Logoff URL to clear
  the WC_PERSISTENT cookie
  

Problem summary

• USERS AFFECTED:
  All WebSphere Commerce users on v7.0 leveraging the Remember Me
  feature
  
  PROBLEM ABSTRACT:
  Personalization ID cookie is not cleared after logging off when
  'Remember Me' was not checked
  
  BUSINESS IMPACT:
  Moderate: Certain marketing activities may be applied to the
  wrong user
  
  RECOMMENDATION:
  

Problem conclusion

• This problem is related to personalizationID. If
  personalizationID is not updated, the promotion will treat it as
  same user and will be applied. So changing to a new
  personalizationID is the solution. A new configuration is
  introduced in instance xml. If configured, the new
  personalizationID will be created in WC_PERSISTENT cookie when
  the user logs off. By default, it is not configured and the
  personalizationID will still be the same as original one.
  
  To enable it, need to add "logoffRefresh="true"" element in
  instance xml. See the following:
   <PersonalizationId display="false" enable="true"
  logoffRefresh="true"/>
  
  
  
  -------------------------------------------------------------
  The latest available maintenance information can be obtained
  from the Recommended Fixes for WebSphere Commerce technote:
  http://www.ibm.com/support/docview.wss?rs=3046&uid=swg21261296
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WC BUS EDITION

• Fixed component ID

  5724I3800

Applicable component levels

• R700 PSY

     UP