PI56466: Access to UserTransaction methods is not correctly disabled with in nested @Transactional annotations

8.5.5.9: WebSphere Application Server V8.5.5 Fix Pack 9
8.5.5.10: WebSphere Application Server V8.5.5 Fix Pack 10
8.5.5.11: WebSphere Application Server V8.5.5 Fix Pack 11
8.5.5.12: WebSphere Application Server V8.5.5 Fix Pack 12
8.5.5.13: WebSphere Application Server V8.5.5 Fix Pack 13
8.5.5.14: WebSphere Application Server V8.5.5 Fix Pack 14
8.5.5.15: WebSphere Application Server V8.5.5 Fix Pack 15
8.5.5.17: WebSphere Application Server V8.5.5 Fix Pack 17
8.5.5.20: WebSphere Application Server V8.5.5.20
8.5.5.18: WebSphere Application Server V8.5.5 Fix Pack 18
8.5.5.19: WebSphere Application Server V8.5.5 Fix Pack 19
8.5.5.16: WebSphere Application Server V8.5.5 Fix Pack 16

APAR status

• Closed as program error.

Error description

• When inside code annotated with an @Transactional
  annotation, access to methods on UserTransaction is defined
  to be disabled. This does not work correctly on WebSphere
  Application Server Liberty Profile: if a user calls code
  annotated with an @Transactional annotation while already
  within an @Transactional transaction, access to
  UserTransaction is possible when the inner call returns.
  For example, consider the pseudo-code below:
  
  @Transactional(TxType.REQUIRES) {
      ..do some work
      @Transactional(TxType.REQUIRES_NEW) {
          ..do some work
      }
      UserTransaction.commit();
  }
  
  In this example, the 'commit' call should cause an
  IllegalStateException, but it doesn't: access to
  UserTransaction is unconditionally re-enabled at the
  boundaries of @Transactional-annotated code.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  Users of @Transactional annotations in      *
  *                  WebSphere Application Server Liberty        *
  *                  versions 8.5.5.6 upwards                    *
  ****************************************************************
  * PROBLEM DESCRIPTION: Access to UserTransaction methods is    *
  *                      not correctly disabled within nested    *
  *                      @Transactional annotations              *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  When inside code annotated with an @Transactional annotation,
  access to methods on UserTransaction is defined to be disabled.
  This does not work correctly on WebSphere Application Server
  Liberty Profile: if a user calls code annotated with an
  @Transactional annotation while already within an @Transactional
  transaction, access to UserTransaction is possible when the
  inner call returns.  For example, consider the pseudo-code
  below:
  
  @Transactional(TxType.REQUIRES) {
      ..do some work
      @Transactional(TxType.REQUIRES_NEW) {
          ..do some work
      }
      UserTransaction.commit();
  }
  
  In this example, the 'commit' call should cause an
  IllegalStateException, but it doesn't: access to UserTransaction
  is unconditionally re-enabled at the boundaries of
  @Transactional-annotated code.
  

Problem conclusion

• The code was altered to correctly manage access to
  UserTransaction methods. There is a small possibility that this
  fix will break existing code: if existing code attempts to
  illegally access UserTransaction methods, it will no longer be
  able to, and will instead receive an IllegalStateException
  error.
  
  The fix for this APAR is currently targeted for inclusion in fix
  pack 8.5.5.9.  Please refer to the Recommended Updates page for
  delivery information:
  http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WAS LIBERTY COR

• Fixed component ID

  5725L2900

Applicable component levels

• R855 PSY

     UP