IBM Support

JR53563: PROCESS INSPECTOR IN PROCESS ADMIN CONSOLE ALLOWS ADMINISTRATORS TO ACCESS INSTANCE DATA

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • Process Inspector on the Process Admin Console allows
    administrators to access instance data if interim fix JR48078 is
    applied. This behavior was enforced and is not configurable.
    However, applying this interim fix also introduces a
    configurable option so that you can allow or refuse
    administrators access to process instance data from the Process
    Inspector on the Process Admin Console.
    

Local fix

Problem summary

  • No additional information is available.
    

Problem conclusion

  • A fix is/will be available for IBM BPM that introduces the
    following configuration flag in the 100Custom.xml file to
    disable the administrator's ability to view and edit task data:
    
    <server>
     <portal merge="mergeChildren">
      <authorization-enabled-for-admins-to-get-set-task-data>
       noadmins
      </authorization-enabled-for-admins-to-get-set-task-data>
     </portal>
    </server>
    
    If the setting is not set, which is the default, or set to
    admins, the earlier behavior is maintained, allowing
    administrators to view and edit task-related data.
    
    On Fix Central (http://www.ibm.com/support/fixcentral), search
    for JR53563:
    
    1. Select IBM Business Process Manager with your edition from
      the product selector, the installed version to the fix pack
      level, and your platform, and then click Continue.
    
    2. Select APAR or SPR, enter JR53563, and click Continue.
    
    When you download fix packages, ensure that you also download
    the readme file for each fix.Review each readme file for
    additional installation instructions and information about the
    fix.
    

Temporary fix

  • Not applicable
    

Comments

APAR Information

  • APAR number

    JR53563

  • Reported component name

    BPM ADVANCED

  • Reported component ID

    5725C9400

  • Reported release

    850

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2015-06-15

  • Closed date

    2015-08-19

  • Last modified date

    2015-08-19

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    BPM STANDARD

  • Fixed component ID

    5725C9500

Applicable component levels

  • R850 PSY

       UP

  • R856 PSY

       UP

[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSFTDH","label":"IBM Business Process Manager Standard"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"8.5","Edition":"","Line of Business":{"code":"LOB36","label":"IBM Automation"}}]

Document Information

Modified date:
19 August 2015