IBM Support

JR47640: CMVC 230465 - Change AddressDo.isEmailAddressValid(String strEmail) to be a protected method, instead private.

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • Starting with Fix Pack 7.0.0.7 email validation has been
    included during user registration to protect against a potential
     security vulnerability if malicious characters were inserted
    into the email columns. Client, however, needs the flexibility
    to allow not to validate email parameters.
    
     This APAR is to change AddressDo.isEmailAddressValid(String
    strEmail) to be a protected method, instead of being private
    (it's current specification).  Then, the customer could create a
    subclass of SelfAddressDO.java (which extends AddressDO.java)
    and override this method. The customer would also have to
    override LDAPIntegrationCmdImpl.getUserDOs() so that
    UserSyncBean will use the new subclass of SelfAddressDO.
    Similarly, they may need to override
    LDAPIntegrationCmdImpl.getOrganizationDOs() so that
    OrganizationSyncBean will use the new subclass of SelfAddressDO
    

Local fix

Problem summary

  • USERS AFFECTED:
     WebSphere Commerce v7.0 customers that need to bypass email
    validation to avoid errors
    
     PROBLEM ABSTRACT:
     Change AddressDo.isEmailAddressValid(String strEmail) to be a
    protected method, instead private.
    
     BUSINESS IMPACT:
     Cannot registered user that do no have an email address in
    their registration information. In addition, all already
    registered users without a valid email address value.
    
     RECOMMENDATION:
    

Problem conclusion

  • Change AddressDo.isEmailAddressValid(String strEmail) to be a
    protected method for an extension point.
     -------------------------------------------------------------
     The latest available maintenance information can be obtained
    from the Recommended Fixes for WebSphere Commerce technote:
     http://www.ibm.com/support/docview.wss?rs=3046&uid=swg21261296
    

Temporary fix

Comments

APAR Information

  • APAR number

    JR47640

  • Reported component name

    WC BUS EDITION

  • Reported component ID

    5724I3800

  • Reported release

    700

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2013-08-29

  • Closed date

    2013-11-05

  • Last modified date

    2013-11-05

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    WC BUS EDITION

  • Fixed component ID

    5724I3800

Applicable component levels

  • R700 PSY

       UP

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSYSYL","label":"WebSphere Commerce Enterprise"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"7.0","Edition":"","Line of Business":{"code":"","label":""}}]

Document Information

Modified date:
05 November 2013