JR57181: YOU CAN'T DELETE IBM BPM SECURITY GROUPS FROM WITHIN PROCESSES OR SERVICES

bpm.8570.cf2017.03.delta.repository
Downloading IBM Business Process Manager V8.5.7 Cumulative Fix 2017.03

APAR status

• Closed as new function.

Error description

• Currently you can delete IBM Business Process Manager (BPM)
  security groups only manually by using the Process Admin
  Console.
  IBM BPM provides an API to create IBM BPM security groups
  programmatically, but there is no way to delete these groups
  from processes or services.
  
  PRODUCTS AFFECTED
  IBM BPM Advanced
  IBM BPM Standard
  IBM BPM Express
  

Local fix

• Delete internal groups by using the Process Admin Console. For
  more information, see "Creating and managing groups"
  (https://www.ibm.com/support/knowledgecenter/SSFPJS_8.5.7/com.ib
  m.wbpm.admin.doc/topics/managing_users_D.html).
  

Problem summary

• No additional information is available.
  

Problem conclusion

• An enhancement will be incorporated into IBM BPM V8.5.7
  cumulative fix 2017.03 that provides two new JavaScript API
  functions:
  tw.system.org.removeRole(String roleName, Boolean
  checkAuthorization)
  
  and
  
  TWRole.remove(Boolean checkAuthorization)
  
  which you can use to delete IBM BPM security group definitions.
  By using the checkAuthorization parameter, you can ensure that
  only members of the IBM BPM administrative group can delete IBM
  BPM security groups successfully. If this parameter is not set,
  no dedicated authorization check is performed and the process
  or service logic must ensure that only authorized callers
  trigger the deletion.
  
  Note: You can't delete a group that has tasks assigned or is
  configured as bpmAdminGroup in the BPMServerSecurityGroups
  configuration.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  BPM STANDARD

• Fixed component ID

  5725C9500

Applicable component levels

• R857 PSY

     UP