IBM Support

PH31902: REQUIRED FIELD RESTRICTED BY SECURITY RULES DOESN?T ALLOW FOR SAVE, EVEN IF REQUIRED FIELD HAS A VALUE.

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

 

APAR status

  • Closed as program error.

Error description

  • Description:
    
    If a field is restricted by field level security rules but is
    also required in the Task View the user is unable to save
    changes to other fields.  This happens even if the field which
    is required has a value populated by someone that has access
    first.
    
    When you click on the ?why can?t I save? link it says <field
    name>: This value is required.
    
    This same behavior is NOT seen in the standard UI, the user is
    able to save even though they cannot fill in the required field
    because of field level security.
    
    Prerequisites:
    
    OP 8.2.1
    
    NOTE:  For this scenario we will use SOXTask (Action Item) and
    the ?Status? field but any object type and field can be used.
    
    1.	Create a group for restricting the access by
    a.	Switch to the standard UI
    b.	Navigate to Administration -> Users, Groups and Domains
    c.	Click on ?Workflow, Reporting and Others?
    d.	Next to Groups click ?Add New?
    e.	Create a new group and add ?OpenPagesAdministrator? to it
    2.	Set up the Security Rule
    a.	Navigate to Administration -> Security Rules
    b.	Click on SOXTask
    c.	Under ?Field Level Security Rules? click ?Add?
    d.	Provide a name
    e.	Formula = ?END_USER IN GROUP (?<group created>?)
    f.	Click ?Choose Fields? and select the field (for example
    ?status?)
    g.	Select ?Read and Update?
    h.	Click ?Save?
    3.	Create a new Task View and make the field required
    a.	Switch back to the Task Focused UI
    b.	Click the ?settings? icon -> Solution Configuration -> Views
    c.	Click ?Add New?
    d.	Check the ?use as default view??
    e.	Object Type = Action Item (for our example)
    f.	Name = provide a name
    g.	Type = Task
    h.	Copy from view = Detail
    i.	Click ?Add?
    j.	Click on the field which has the security rule defined (in
    our example Status)
    k.	Slide the toggle to make the field required
    l.	Click ?Done?
    m.	Publish the View
    4.	Create the object record as the Administrator who has access
    to all fields
    a.	Navigate to the Menu -> Remediation -> Action Item
    b.	Click ?Add New?
    c.	Fill in the required fields
    d.	Click ?Save?
    e.	On the Task View ensure that the required field has a value
    
    Steps to Reproduce:
    
    1.	Log in as the ?restricted? user (for this example I used the
    default user ?iam?)
    2.	Click on ?Settings? icon -> Other -> Display Debug Info (or
    just verify it is checked already)
    3.	Try to update the previously created record
    a.	Navigate to the Action Item created previously
    b.	Click on the menu -> Remediation -> Action Items
    c.	Search for the record created above and select it
    d.	Notice that the field that has the security rule states
    ?Confidential?
    e.	Update one of the other fields, for example ?Additional
    Description?
    f.	Note the ?Save? button is grayed out
    4.	When you click on ?Why can?t I save?? you see that message
    that the field is required.
    a.	This field is filled in by the admin user previously so it
    does have a value, this user just can?t see it.
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED:                                              *
    * OpenPages Users                                              *
    ****************************************************************
    * PROBLEM DESCRIPTION:                                         *
    * REQUIRED FIELD RESTRICTED BY SECURITY RULES DOESN?T ALLOW    *
    * FOR SAVE, EVEN IF REQUIRED FIELD HAS A VALUE.                *
    ****************************************************************
    * RECOMMENDATION:                                              *
    * Customers should download OpenPages with Watson 8.2 Fix Pack *
    * 2 (8.2.0.3). See the following document for details on       *
    * obtaining OpenPages 8.2.0.3:                                 *
    * https://www.ibm.com/support/pages/openpages-watson-82-fix-pa *
    * ck-3                                                         *
    ****************************************************************
    

Problem conclusion

  • Problem
    The user is not allowed to see the value of the required field
    so the required field validation fails and the user can't save
    any changes in the object.
    
    Solution
    There is an API that indicates whether the field has a value or
    not, even if the user can't see the value. If this is true,
    disable the required validator for this field.
    
    Customers should download OpenPages with Watson 8.2 Fix Pack 2
    (8.2.0.3). See the following document for details on obtaining
    OpenPages 8.2.0.3:
    https://www.ibm.com/support/pages/openpages-watson-82-fix-pack-3
    

Temporary fix

Comments

APAR Information

  • APAR number

    PH31902

  • Reported component name

    OPENPAGES GRC

  • Reported component ID

    5725D5100

  • Reported release

    820

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2020-11-19

  • Closed date

    2021-08-10

  • Last modified date

    2021-08-10

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    OPENPAGES GRC

  • Fixed component ID

    5725D5100

Applicable component levels

[{"Line of Business":{"code":"LOB10","label":"Data and AI"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSFUEU","label":"OpenPages GRC Platform"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"820"}]

Document Information

Modified date:
11 August 2021