JR56552: ADMINISTRATIVE RIGHTS ARE NOT APPLIED FOR REST CALLS THAT TRIGGER SAVED SEARCHES

bpm.8570.cf2016.09.delta.repository.2of2
bpm.8570.cf2016.09.delta.repository.1of2
Downloading IBM Business Process Manager V8.5.7 Cumulative Fix 2016.09

APAR status

• Closed as program error.

Error description

• If you trigger a saved search  by using a REST API, you might
  receive an empty result set even though you, as the calling
  user, are part of the tw_admins group and are, therefore,
  authorized to see all IBM Business Process Manager (BPM)
  artifacts.
  

Local fix

Problem summary

• While creating the SQL statement to retrieve the IBM BPM data,
  the administrative rights of the calling user are checked. This
  check might fail because it is case sensitive.
  
  PRODUCTS AFFECTED
  IBM BPM Advanced
  IBM BPM Standard
  IBM BPM Express
  

Problem conclusion

• A fix will be included in IBM BPM V8.5.7 cumulative fix 2016.09
  that will properly authenticate the user as part of or not part
  of the administrator group.
  
  To determine whether the cumulative fix is available and
  download it if it is, complete the following steps on Fix
  Central:
  
  1. On the Select product tab, select WebSphere as the product
  group, IBM Business Process Manager with your edition from the
  WebSphere options, All as the installed version, and All as the
  platform, and then click Continue.
  2. In the Text field, enter "cumulative fix?, and click
  Continue.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  BPM STANDARD

• Fixed component ID

  5725C9500

Applicable component levels

• R857 PSY

     UP