JR49387: CONCURRENT REST API CALLS RESULT IN EJB EXCEPTION

Version 8.5 Refresh Pack 5 for the IBM Business Process Manager products

APAR status

• Closed as fixed if next.

Error description

• When using REST API action "getNext" , if
  multiple calls are executed simultaneously, an exception occurs
  when the user tries to claim the task.
  The following exception might be seen in the logs
  
  [1/17/14 17:33:03:978 EST] 00000525 wle           E
  CWLLG2229E: An
  exception occurred in an EJB call.  Error: You are not
  authorized to
  perform this action
  
  com.lombardisoftware.client.delegate.
  BusinessDelegateException: You are not authorized to perform
  this action
   at
  com.lombardisoftware.client.delegate.BusinessDelegateException.
  asBusinessDelegateException(BusinessDelegateException.java:46)
   at com.lombardisoftware.client.delegate.TaskAPIDelegateDefault.
  assignTask(TaskAPIDelegateDefault.java:132)
  

Local fix

• NA
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:  IBM Business Process Manager (BPM)          *
  *                  V8.5.5.0 Advanced, Standard, and Express.   *
  ****************************************************************
  * PROBLEM DESCRIPTION: When executing multiple REST API        *
  *                      "getNext" simultaneously, the           *
  *                      following error may be seen :           *
  *                      CWLLG2229E: An exception occurred in    *
  *                      an EJB call.  Error: You are not        *
  *                      authorized to perform this action.      *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  Concurrent invocation of the "getNext" REST API for multiple
  users may result in a CWLLG2229E error being thrown during
  runtime. A sample URI of this API would be:
  "http://localhost:9080/rest/bpm/wle/v1/task?action=getNext&query
  =NextTask"
  The query returns a list of unclaimed tasks the current user
  may claim.  If multiple users of the same participant group
  invokes this query simultaneously, potentially the same list
  of tasks may be returned for two or more users and then a race
  condition is created.  Depending on who will claim the task
  first, the second user and onward will get an EJB exception
  with the following error message:
  CWLLG2229E: An exception occurred in an EJB call.  Error: You
  are not authorized to perform this action.
  

Problem conclusion

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels

• R800 PSY

     UP