IBM Support

JR55960: AUTHORIZATION ON COMPLETE AND FINISH TASK REST APIS DOES NOT MATCH DOCUMENTED BEHAVIOR

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • The documentation states that the potential task owner, task
    collaborator, task team manager authorization roles cannot
    complete or finish a task.
    However, the implementation deviates from this specification.
    

Local fix

Problem summary

  • No additional information is available.
    
    PRODUCTS AFFECTED
    IBM Business Process Manager (BPM) Advanced
    IBM BPM Standard
    IBM BPM Express
    

Problem conclusion

  • A fix will be included in IBM BPM V8.5.7 cumulative fix 2016.09
    that excludes task collaborators, potential task owners, and
    task team managers from being authorized to complete and finish
    tasks.
    
    The following roles remain authorized to complete and finish
    tasks:
    
    - IBM BPM administrators
    - Process application administrators (IBM Process
      Portal administrator team)
    - Instance owners team
    - Task owner
    
    These roles are described in "REST API authorization for task
    actions"
    (https://www.ibm.com/support/knowledgecenter/SSFPJS_8.5.7/com.ib
    m.wbpm.bpc.doc/topics/rrestapi_authtasks.html).
    
    To re-create the earlier authorization behavior, add the
    following setting to your 100Custom.xml file:
    
    <server merge="mergeChildren">
     <portal merge="mergeChildren">
      <authorization-level-for-task-complete-and-finish
    merge="replace">8560</authorization-level-for-task-complete-and-
    finish>
     </portal>
    </server>
    

Temporary fix

Comments

APAR Information

  • APAR number

    JR55960

  • Reported component name

    BPM STANDARD

  • Reported component ID

    5725C9500

  • Reported release

    857

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2016-05-19

  • Closed date

    2016-09-09

  • Last modified date

    2016-09-09

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    BPM STANDARD

  • Fixed component ID

    5725C9500

Applicable component levels

  • R857 PSY

       UP

[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSFTDH","label":"IBM Business Process Manager Standard"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"857","Edition":"","Line of Business":{"code":"LOB36","label":"IBM Automation"}}]

Document Information

Modified date:
09 September 2016