PH23898: ONLY ORIGINAL WORKFLOW ASSIGNEE/SUBSCRIBER CAN REFRESH THE WORKFLOW PERMISSIONS

APAR status

• Closed as program error.

Error description

• The panel for the current workflow stage can be refreshed, but
  only by the users authorized on the current stage.  This becomes
  a problem if the assigned users change after that stage is
  reached.  A user who is properly assigned a task is unable to
  use the workflow, and will receive an error if they attempt to
  refresh the workflow status panel:
  OP-08549
  User username does not have permission to perform this action.
  
  
  To reproduce:
  Prerequisites:
  OpenPages 8.0.0.3 with standard test data
  
  Create a simple workflow:
  1.	Login as OpenPagesAdministrator
  2.	Select Manage Workflows on the gear menu
  3.	Click Add New
  4.	Enter the name as Test risk refresh permission
  5.	Set Object type as Risk, and Type as Manual start
  6.	Click Add
  7.	Create 3 stages, a start, an end, and one standard stage
  called Active
  8.	Set the Assignee for the Active stage to the Owner field for
  the Risk:
  
  
  9.	Leave everything else as defaults
  10.	Click Publish
  
  Create a Risk to test:
  1.	Go to Assessments->Risks on the main menu
  2.	Click Add New
  3.	Name the new Risk WF Refresh test
  4.	Set the Owner as OpenPagesAdministrator
  5.	Choose a parent and fill in any other required fields
  6.	Save the Risk
  
  Create a test user:
  1.	Switch to the standard UI
  2.	Go to Administration->Users
  3.	Create a new user
  4.	Enter a name, password, etc.
  5.	Grant the user the OpenPages Modules Master profile
  6.	Leave everything else as defaults
  7.	Save the new user
  8.	Give the role Modules Master ? all permissions at the root
  level to the new user
  
  
  
  Steps to Reproduce:
  1.	Log in as OpenPagesAdministrator
  2.	Go to Assessments->Risks
  3.	Find WF Refresh test and click on it
  4.	On the workflow Actions menu, choose the start option
  5.	Edit the Owner field and set it to the new test user
  6.	Click Save
  7.	Log out
  8.	Login as the test user
  9.	Go to Assessments->Risks
  10.	Find WF Refresh test and click on it
  11.	Note that the user is the Owner, but does not have the
  Action menu
  12.	Click the refresh button in the workflow panel:
  
  13.	The error message appears:
  

Local fix

• Refresh the workflow stage as the administrator or as one of the
  original assignees or subscribers
  Restarting OpenPages services will also resolve the problem
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * OpenPages Users                                              *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * ONLY ORIGINAL WORKFLOW ASSIGNEE/SUBSCRIBER CAN REFRESH THE   *
  * WORKFLOW PERMISSIONS                                         *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Customers should download OpenPages 8.2 from Passport        *
  * Advantage. See the following document for details on         *
  * obtaining OpenPages 8.2:                                     *
  * https://www.ibm.com/support/pages/downloading-ibm-openpages- *
  * watson-version-82-passport-advantage                         *
  ****************************************************************
  

Problem conclusion

• We have changed the way this works in 8.2.  We now auto update
  the workflow field.  What that means is that the refresh button
  is not needed anymore.
  
  Customers should download OpenPages 8.2 from Passport Advantage.
  See the following document for details on obtaining OpenPages
  8.2:
  https://www.ibm.com/support/pages/downloading-ibm-openpages-wats
  on-version-82-passport-advantage
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  OPENPAGES GRC

• Fixed component ID

  5725D5100

Applicable component levels