PH34449: PAUSE AND CANCEL BUTTONS IN APPLICATION PROCESS PAGE ARE ACTIVE EVEN FOR THE USER HAVING ONLY VIEW ACCESS.

APAR status

• Closed as program error.

Error description

• A user having only view access can still see Pause and Cancel
  buttons in the application process request page.
  
  When the user clicks on "Pause" button the alert message
  "Could not pause the process. See the server log for details."
  Is displayed.
  
  When the user clicks on "Cancel" button and confirms the cancel
  request the alert message
  "Could not cancel the process. See the server log for details."
  Is displayed.
  
  For a user with only view access the Pause and Cancel
  buttons should not be actionable.
  they should be greyed out or
  they should not be displayed on the UI.
  
  Steps to Reproduce
  ----------------------
  1. Create a Role as "Test Release manager "
  2. Create a user and associate the Role "Release Manager"
  3. Provide only view access for the Applications and Components.
  4. In the Web UI enable Applications, Component, Dashboard and
  Reports tab.
  5. Now with Admin access , execute an Application Process
  6. Switch to user created above
  7. On the Dash board page Only Details button is present
  8. However on the Application Process Request Page Pause and
  Cancel button are enabled
  9. When clicked the alert message is displayed.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * All end users on all supported browsers.                     *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * A user having only view access can still see Pause and       *
  * Cancel                                                       *
  * buttons in the application process request page.             *
  *                                                              *
  * When the user clicks on "Pause" button the alert message     *
  * "Could not pause the process. See the server log for         *
  * details."                                                    *
  * Is displayed.                                                *
  *                                                              *
  * When the user clicks on "Cancel" button and confirms the     *
  * cancel                                                       *
  * request the alert message                                    *
  * "Could not cancel the process. See the server log for        *
  * details."                                                    *
  * Is displayed.                                                *
  *                                                              *
  * For a user with only view access the Pause and Cancel        *
  * buttons should not be actionable.                            *
  * they should be greyed out or                                 *
  * they should not be displayed on the UI.                      *
  *                                                              *
  * Steps to Reproduce                                           *
  * ----------------------                                       *
  * 1. Create a Role as "Test Release manager "                  *
  * 2. Create a user and associate the Role "Release Manager"    *
  * 3. Provide only view access for the Applications and         *
  * Components.                                                  *
  * 4. In the Web UI enable Applications, Component, Dashboard   *
  * and                                                          *
  * Reports tab.                                                 *
  * 5. Now with Admin access , execute an Application Process    *
  * 6. Switch to user created above                              *
  * 7. On the Dash board page Only Details button is present     *
  * 8. However on the Application Process Request Page Pause and *
  * Cancel button are enabled                                    *
  * 9. When clicked the alert message is displayed.              *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Fixed in version 7.2.0.1                                     *
  ****************************************************************
  

Problem conclusion

• Fix is provided in IBM UrbanCode Deploy 7.2.0.1
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  UC DEPLOY

• Fixed component ID

  5725M5400

Applicable component levels