JR47539: INTRODUCTION OF AUDIT LOGGING FOR THE "EXECUTE JAVASCRIPT" REST API.

Download Version 8.0.1 Fix Pack 2 for the IBM Business Process Manager products
Version 8.5.0 Fix Pack 1 for the IBM Business Process Manager products
Version 7.5.1 Fix Pack 2 for the IBM Business Process Manager products

APAR status

• Closed as program error.

Error description

• In order to provide more control over the use of the "execute
  javascript" REST API (v1/process/{instanceID}?action=js), audit
  logging is being added to allow customers have a level of
  traceability.   When the "execute javascript" REST API is
  called, a message will be logged to the server's trace.log file
  containing the username, current timestamp and the javascript
  expression being evaluated.
  

Local fix

• N/A
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:  Any user of the "execute javascript" REST   *
  *                  API                                         *
  ****************************************************************
  * PROBLEM DESCRIPTION: The "execute javascript" REST API       *
  *                      (/rest/bpm/wle/v1/process/{instanceID}? *
  *                      action=js) can be used to execute a     *
  *                      javascript expression within the        *
  *                      execution context of the specified      *
  *                      process instance.    This APAR will     *
  *                      introduce an audit logging capability   *
  *                      to this REST API so that users can      *
  *                      track its usage within a running        *
  *                      server.                                 *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  This APAR introduces audit logging in the "execute javascript"
  REST API.
  

Problem conclusion

• This APAR adds a new audit logging capability.
  
  To enable the REST audit logging capability, please request
  server administrator to add this trace string for the server:
  WLE.wle_rest_audit=fine
  
  For details of enabling trace at server startup, please check
  this link:
  http://pic.dhe.ibm.com/infocenter/wasinfo/v7r0/topic/com.ibm.web
  sphere.nd.multiplatform.doc/info/ae/ae/ttrb_entrss.html
  
  For details of enabling trace on a running server, please
  check this link:
  http://pic.dhe.ibm.com/infocenter/wasinfo/v7r0/topic/com.ibm.web
  sphere.nd.multiplatform.doc/info/ae/ae/ttrb_entrrs.html
  
  The iFix is available on BPM v7.5.1.0.
  The iFix file and its README file are available in Fix Central.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  BPM STANDARD

• Fixed component ID

  5725C9500

Applicable component levels

• R750 PSY

     UP