JR52974: EXECUTESERVICEBYNAME JAVASCRIPT API OVERWRITES VALUES OF PRIVATE VARIABLES IN THE CALLED SERVICE

bpm.8560.cf1.delta.repository.2
bpm.8560.cf1.delta.repository.1
8.5.6.0-WS-BPM-IFJR52974
8.5.5.0-WS-BPM-IFJR52974
Version 8.5 Refresh Pack 7 for the IBM Business Process Manager products

APAR status

• Closed as program error.

Error description

• When you use the executeServiceByName JavaScript API, you can
  provide a map with inputs variables. If the map contains a
  variable with a name that is identical to the name of a private
  variable of the called service, the private variable is
  overwritten. You see neither a warning nor an exception message.
  

Local fix

Problem summary

• When you use the executeServiceByName JavaScript API, every
  variable from the input map is set for the called service.
  Because there is no check that enforces the private variable
  scope, private variables are overwritten with new values.
  

Problem conclusion

• A fix is/will be available for IBM BPM V8.5.5.0 and V8.5.6.0
  that causes the service engine to show you the following
  exception when the API tries to overwrite a private or output
  variable of the called service:
  
  VariableDoesNotExistException: CWTBG0543E: The variable
  <variableName> does not exist.
  
  On Fix Central (http://www.ibm.com/support/fixcentral), search
  for JR52974:
  
  1. Select IBM Business Process Manager with your edition from
    the product selector, the installed version to the fix pack
    level, and your platform, and then click Continue.
  
  2. Select APAR or SPR, enter JR52974, and click Continue.
  
  When you download fix packages, ensure that you also download
  the readme file for each fix. Review each readme file for
  additional installation instructions and information about the
  fix.
  
  For the fix to take effect, activate it by setting the following
  configuration flag in the 100Custom.xml:
  
   <server>
     <service-engine>
       <enforce-private-variable-scope>true
       </enforce-private-variable-scope>
     </service-engine>
   </server>
  
  Then restart the server.
  

Temporary fix

• Not applicable
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  BPM STANDARD

• Fixed component ID

  5725C9500

Applicable component levels

• R855 PSY

     UP

• R856 PSY

     UP