JR52611: IBM BPM ADMINISTRATORS MAY NOT VIEW DOCUMENTS OF OTHER INSTANCES

8.5.0.1-WS-BPM-IFJR52611
8.5.6.0-WS-BPM-IFJR52611
bpm.8560.cf1.delta.repository.1
bpm.8560.cf1.delta.repository.2
Version 8.5.0 Fix Pack 2 for the IBM Business Process Manager products
Version 8.5 Refresh Pack 7 for the IBM Business Process Manager products

APAR status

• Closed as program error.

Error description

• When you model a business process (BPD) that tries to access the
  contents of a document of another BPD instance within the IBM
  BPM document store in an automated ECM integration step running
  under the authority of an IBM BPM administrator, you see the
  following message instead of the actual contents of the
  document:
  
  You are not authorized to see the IBM BPM document content.
  
  Users in the bpmAdminGroup group are usually allowed to perform
  any action on a BPD instance, and they should, therefore, be
  allowed to see the contents of documents.
  
  Sample Request
  ----------------------------------------------------
  https://scocentral4-ite.swissre.com:
  9443/rest/bpm/wle/v1/visual/processModel/instances?instanceIds=[
  1725972]&image=false
  
  Error
  ----------------------------------------------------
  
  {
    "status": "error",
    "Data": {
      "status": "error",
      "exceptionType":
  "com.ibm.bpm.wle.api.NotAuthorizedActionException",
      "errorNumber": "CWTBG0549E",
      "errorMessage": "CWTBG0549E: You are not authorized to
  perform the
  'ACTION_VIEW_PROCESS_DIAGRAM' action.",
      "errorMessageParameters": [
        "ACTION_VIEW_PROCESS_DIAGRAM"
      ],
      "responses": null
    }
  }
  

Local fix

Problem summary

• The authorization check in the context of the 'get document
  content' ECM integration, does not regard IBM BPM
  administrators.
  

Problem conclusion

• A fix is available for IBM BPM V8.5.0.1 that adds an appropriate
  authorization check for IBM BPM administrators when running an
  ECM integration step of type 'get document content'.
  
  On Fix Central (http://www.ibm.com/support/fixcentral), search
  for JR52611:
  
  1. Select IBM Business Process Manager with your edition from
    the product selector, the installed version to the fix pack
    level, and your platform, and then click Continue.
  
  2. Select APAR or SPR, enter JR52611, and click Continue.
  
  When you download fix packages, ensure that you also download
  the readme file for each fix. Review each readme file for
  additional installation instructions and information about the
  fix.
  

Temporary fix

• Not applicable
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  BPM STANDARD

• Fixed component ID

  5725C9500

Applicable component levels