JR54329: LONG RUN TIMES OCCUR BECAUSE AUTHORIZATION CODE INCLUDES FREQUENT GROUP MEMBERSHIP LOOKUPS

bpm.8570.cf2016.06.delta.repository.1of2
bpm.8570.cf2016.06.delta.repository.2of2
8.5.6.2-WS-BPM-IFJR54329

APAR status

• Closed as program error.

Error description

• In the AuthorizationAPICore class, the
  listCurrentUserGroupMemberships method is used, which causes
  long run times for users who are in many groups.
  

Local fix

Problem summary

• No additional information is available.
  

Problem conclusion

• A fix is available for IBM BPM V8.5.6.2 that optimizes group
  membership checks  for authorization decisions by restricting
  group membership lookups to the groups that are relevant in a
  specific context.
  
  Complete the following steps:
  
  1. Download and install IBM BPM V8.5.6 cumulative fix 2 from
    "Version 8.5.6.0 Cumulative Fix 2 for the IBM Business Process
    Manager products"
    (http://www.ibm.com/support/docview.wss?uid=swg24041303).
  
  2. Go to Fix Central (http://www.ibm.com/support/fixcentral) and
    search for JR54329:
    a. Select IBM Business Process Manager with your edition from
      the product selector, the installed version to the fix pack
      level, and your platform, and then click Continue.
    b. Select APAR or SPR, enter JR54329, and click Continue.
    c. Install JR54329.
  
  When you download fix packages, ensure that you also download
  the readme file for each fix. Review each readme file for
  additional installation instructions and information about the
  fix.
  
  3.  Enable the new behavior by adding the following setting to
    the 100Custom.xml files in Process Server and Process Center:
  
  <common merge="mergeChildren">
    <security merge="mergeChildren">
      <optimize-group-membership-lookups merge="replace">true
      </optimize-group-membership-lookups>
    </security>
  </common>
  
  Use this setting when users are members in many groups. When
  that many large groups (with many thousand users as members) are
  in use, perform tests after you apply this setting.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  BPM STANDARD

• Fixed component ID

  5725C9500

Applicable component levels