IBM Support

JR46791: MODIFYING PARTICIPANTGROUP MEMBERSHIP IN PROCESSADMIN CONSOLE, ARTIFACTS IN TOOLKITS MAY BE EXPOSED TO THE WRONG GROUP OF USERS

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • In certain cases, modifying the ParticipantGroup/Team
    membership at runtime is not accurate for toolkit artifacts
    such as BPDs, HumanServices, EPVs, etc.
    It's possible to modify the group membership in the ProcessAdmin
    console for a particular ProcessApp snapshot, changing the group
    membership for all running and future instances.
    
    For ParticipantGroups/Teams modeled in a toolkit, the group
    membership is not accurately updated.
    This leads to situations where a BPD, EPV, etc.  are exposed to
    the wrong group of users.  Users may not see artifacts they're
    authorized too, or they may see artifacts they're not
    authorized too.
    

Local fix

Problem summary

  • In certain cases, modifying the ParticipantGroup membership at
    runtime may expose artifcats in toolkits to the wrong group of
    users.
    

Problem conclusion

  • When a toolkit dependency is added, a single internal group is
    created for each ParticipantGroup.  When the ParticipantGroup
    membership is updated at runtime, the changes are valid for all
    artifacts exposed to this ParticipantGroup, regardless of where
    it's modeled.
    
    Problem will be fixed with V801 FP2
    

Temporary fix

Comments

APAR Information

  • APAR number

    JR46791

  • Reported component name

    BPM ADVANCED

  • Reported component ID

    5725C9400

  • Reported release

    801

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2013-05-29

  • Closed date

    2013-06-27

  • Last modified date

    2013-06-27

  • APAR is sysrouted FROM one or more of the following:

    JR46780

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    BPM ADVANCED

  • Fixed component ID

    5725C9400

Applicable component levels

  • R801 PSY

       UP

[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSFTN5","label":"IBM Business Process Manager Advanced"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"8.0.1","Edition":"","Line of Business":{"code":"LOB36","label":"IBM Automation"}}]

Document Information

Modified date:
27 June 2013