IBM Support

JR47539: INTRODUCTION OF AUDIT LOGGING FOR THE "EXECUTE JAVASCRIPT" REST API.

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • In order to provide more control over the use of the "execute
    javascript" REST API (v1/process/{instanceID}?action=js), audit
    logging is being added to allow customers have a level of
    traceability.   When the "execute javascript" REST API is
    called, a message will be logged to the server's trace.log file
    containing the username, current timestamp and the javascript
    expression being evaluated.
    

Local fix

  • N/A
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED:  Any user of the "execute javascript" REST   *
    *                  API                                         *
    ****************************************************************
    * PROBLEM DESCRIPTION: The "execute javascript" REST API       *
    *                      (/rest/bpm/wle/v1/process/{instanceID}? *
    *                      action=js) can be used to execute a     *
    *                      javascript expression within the        *
    *                      execution context of the specified      *
    *                      process instance.    This APAR will     *
    *                      introduce an audit logging capability   *
    *                      to this REST API so that users can      *
    *                      track its usage within a running        *
    *                      server.                                 *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    This APAR introduces audit logging in the "execute javascript"
    REST API.
    

Problem conclusion

Temporary fix

Comments

APAR Information

  • APAR number

    JR47539

  • Reported component name

    BPM STANDARD

  • Reported component ID

    5725C9500

  • Reported release

    751

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2013-08-15

  • Closed date

    2013-09-18

  • Last modified date

    2013-09-18

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    BPM STANDARD

  • Fixed component ID

    5725C9500

Applicable component levels

  • R750 PSY

       UP

[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSFTDH","label":"IBM Business Process Manager Standard"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"7.5.1","Edition":"","Line of Business":{"code":"LOB36","label":"IBM Automation"}}]

Document Information

Modified date:
18 September 2013