IBM Support

PH21790: TASK UI ? SOME WIDGETS ON THE DASHBOARD NOT ALIGN WITH USER PERMISSIONS

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

 

APAR status

  • Closed as program error.

Error description

  • When a user with access to limited object types manages the
    dashboard in the Task Focused UI, some of the widgets correctly
    limits the object types the user is allowed, while others show
    options to all object types, creating confusion.
    
    Prerequisites:
    
    OpenPages installed
    
    Set up a user with limited object types:
    1.	Log into OpenPages as OpenPagesAdministrator
    2.	Switch to Standard UI
    3.	Navigate to Administration -> Role templates
    4.	Click Add, enter a name, click Next, tick SOXBusEntity and
    SOXIssue and grant Read, Write and Associate permissions, click
    next then Finish
    5.	Navigate to Administration -> Users
    6.	Click Create User
    7.	Create a user associated to the OpenPages Modules 7.4.0
    Master profile
    8.	Scroll down and click on Assign Roles, tick the newly created
    role template against the root security domain
    
    Steps to Reproduce:
    
    1.	Log into OpenPages as the newly created user
    2.	Click on the cogwheel icon on the right to edit the dashboard
    3.	Click on Add Panel
    4.	Change the Panel type to Chart, and note that the Object Type
    drop down lists ALL object types.
    5.	Click Cancel
    6.	Click on Add Panel, leave Panel Type as Custom, enter a Label
    name, then click Add Widget
    7.	Leave the Type as Add New, then click on the Object Type and
    confirm the list shows only object types the user has
    permissions to
    
    
    Expected Results:
    
    All dashboard widgets should adhere to the role permissions
    assigned to the user
    
    Actual Results:
    
    User is able to add widgets to the dashboard that the user has
    no role permissions to
    
    Error Message:
    
    None
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED:                                              *
    * OpenPages Users                                              *
    ****************************************************************
    * PROBLEM DESCRIPTION:                                         *
    * TASK UI ? SOME WIDGETS ON THE DASHBOARD NOT ALIGN WITH USER  *
    * PERMISSIONS                                                  *
    ****************************************************************
    * RECOMMENDATION:                                              *
    * Customers should download OpenPages 8.2 from Passport        *
    * Advantage. See the following document for details on         *
    * obtaining OpenPages 8.2:                                     *
    * https://www.ibm.com/support/pages/downloading-ibm-openpages- *
    * watson-version-82-passport-advantage                         *
    ****************************************************************
    

Problem conclusion

  • Problem: Object type fields on a dashboard sometimes do not
    align with user permissions.
    Solution: Check the role template with the object types
    permission for the user who is logged in when we get the object
    types.
    
    Customers should download OpenPages 8.2 from Passport Advantage.
    See the following document for details on obtaining OpenPages
    8.2:
    https://www.ibm.com/support/pages/downloading-ibm-openpages-wats
    on-version-82-passport-advantage
    

Temporary fix

Comments

APAR Information

  • APAR number

    PH21790

  • Reported component name

    OPENPAGES GRC

  • Reported component ID

    5725D5100

  • Reported release

    810

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2020-02-04

  • Closed date

    2020-06-18

  • Last modified date

    2020-06-18

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    OPENPAGES GRC

  • Fixed component ID

    5725D5100

Applicable component levels

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSFUEU","label":"IBM OpenPages with Watson"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"810","Line of Business":{"code":"LOB10","label":"Data and AI"}}]

Document Information

Modified date:
19 June 2020