IBM Support

PH19303: CANNOT SEARCH ON GROUP IN COGNOS

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

 

APAR status

  • Closed as program error.

Error description

  • Attempts to use the search for Groups inside Cognos Analytics
    against the OpenPagesSecurityRealm namespace fails to return any
    results. The User search still works, and searching for Groups
    against the Cognos namespace still works fine.
    This makes it difficult to select certain Groups when system has
    a lot of Users and Groups.
    
    Prerequisites:
    
    OpenPages installed
    
    Steps to Reproduce:
    
    1.	Log into OpenPages as OpenPagesAdministrator
    2.	Launch Cognos Analytics
    3.	Click the ??? next to any report and select Properties
    4.	Click on the Permissions tab, tick the ?Override parent
    permissions? check box and click the (+) icon to Add a user.
    5.	Click on OpenPagesSecurityRealm and in the search field,
    enter ?Sample Users? and press enter and confirm no results.
    6.	On the left navigation, click on Manage -> Administration
    Console
    7.	Click on the Security tab
    8.	Click on Cognos
    9.	On the top right, click on the spy glass icon to search,
    change the Type to Group, enter ?Everyone? in the search field
    and click Search. Confirm a result is returned.
    10.	On the cookie trail, click on Directory, then click on
    OpenPagesSecurityRealm
    11.	On the top right, click on the spy glass icon to search,
    change the Type to Group, enter ?OpenPages? in the search field
    and click Search. Confirm no results is returned.
    
    Expected Results:
    
    Searching for groups in Cognos Analytics should be working.
    
    Actual Results:
    
    Searching for groups in Cognos Analytics does not work only
    against the OpenPagesSecurityRealm namespace.
    
    Error Message:
    
    None
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED:                                              *
    * OpenPages Users                                              *
    ****************************************************************
    * PROBLEM DESCRIPTION:                                         *
    *  CANNOT SEARCH ON GROUP IN COGNOS                            *
    ****************************************************************
    * RECOMMENDATION:                                              *
    * Customers should download OpenPages 8.2 from Passport        *
    * Advantage. See the following document for details on         *
    * obtaining OpenPages 8.2:                                     *
    * https://www.ibm.com/support/pages/downloading-ibm-openpages- *
    * watson-version-82-passport-advantage                         *
    ****************************************************************
    

Problem conclusion

  • The SecurityHelperServlet get implementation is not handling the
    null check. When retrieving users and groups from the
    UserGroupCache, when the user or group is present we are
    returned with null.  So the logic needs to handle the null
    check. The issue was because of it not being handled. We have
    updated all the cache lookup logic to handle null check.
    
    Customers should download OpenPages 8.2 from Passport Advantage.
    See the following document for details on obtaining OpenPages
    8.2:
    https://www.ibm.com/support/pages/downloading-ibm-openpages-wats
    on-version-82-passport-advantage
    

Temporary fix

Comments

APAR Information

  • APAR number

    PH19303

  • Reported component name

    OPENPAGES GRC

  • Reported component ID

    5725D5100

  • Reported release

    800

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2019-11-17

  • Closed date

    2020-06-18

  • Last modified date

    2020-06-18

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    OPENPAGES GRC

  • Fixed component ID

    5725D5100

Applicable component levels

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSFUEU","label":"IBM OpenPages with Watson"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"800","Line of Business":{"code":"LOB10","label":"Data and AI"}}]

Document Information

Modified date:
19 June 2020