PJ43102: FNRPE2131090068E ERROR IS WRITTEN TO THE PE SERVER LOGS WHEN A NON-ADMIN USER ACCESSES ICM CLIENT

IBM Case Manager V5.1.1 Fix Pack 3 for Linux for System z
IBM Case Manager V5.1.1 Fix Pack 3 for Windows
IBM Case Manager V5.1.1 Fix Pack 3 for Solaris
IBM Case Manager V5.1.1 Fix Pack 3 for Linux
IBM Case Manager V5.1.1 Fix Pack 3 Client for Linux for System z
IBM Case Manager V5.1.1 Fix Pack 3 Client for Windows
IBM Case Manager V5.1.1 Fix Pack 3 Client for Solaris
IBM Case Manager V5.1.1 Fix Pack 3 Client for Linux
IBM Case Manager V5.1.1 Fix Pack 3 Client for AIX
IBM Case Manager V5.1.1 Fix Pack 3 for AIX

APAR status

• Closed as program error.

Error description

• When a non-administrative user logs in to IBM Case Manager
  Client, the following FNRPE2131090068E error message is written
  to
  the Process Engine log. This error does not affect regular
  operations
  with Case Manager Client. However, it does cause excessive
  logging in
  Process Engine due to the request to writableappspaces when the
  user does not have access.
  
  Steps to reproduce:
  1) Log in as a non admin/unprivileged user, this user should not
  have write access in the application space security.
  2) Upon login, navigate to the Work page, with the In-basket
  widget.
  3) Enable FireBug to see the error; Also check the Process
  Engine
  logs for an error.
  4) The error will occur prior to reassigning a work item;
  however
  it should not affect the functionality of reassign a work item.
  
  URL that generates the error:
  /CaseManager/P8BPMREST/p8/bpm/v1/writableappspaces/<solutionName
  >/roles?cp=<connectionPointName>&dojo.preventCache=0000000000000
  
  This results in a 403 Forbidden error
  This is the response in JSON:
  {"msg":"filenet.pe.rest.NoPermissionException","stack":"filenet.
  pe.rest.NoPermissionException"}
  
  Here is the stack that is logged in the Process Engine server
  pesvr_system.log
  2013/10/18 10:21:00.735-0700 4624:WT=5 Reg#2 [Error]
  FNRPE2131090068E ; Exception: Security attributes disallow
  access.
  There is no additional information available.
      at
  filenet.jpe.rpc.orb.orb_rpc_fetchApplicationSpaces.execute(orb_r
  pc_fetchApplicationSpaces.java:82)
      at
  filenet.jpe.rpc.orb.ORBPERPC.orb_rpc_fetchApplicationSpaces(ORBP
  ERPC.java:3635)
      at
  filenet.pe.peorb.FileNet_PERPC.PERPCPOA._invoke(PERPCPOA.java:16
  83)
      at
  com.ibm.CORBA.poa.POAServerDelegate.dispatchToServant(POAServerD
  elegate.java:407)
      at
  com.ibm.CORBA.poa.POAServerDelegate.internalDispatch(POAServerDe
  legate.java:339)
      at
  com.ibm.CORBA.poa.POAServerDelegate.dispatch(POAServerDelegate.j
  ava:262)
      at com.ibm.rmi.iiop.ORB.process(ORB.java:533)
      at com.ibm.CORBA.iiop.ORB.process(ORB.java:1574)
      at
  com.ibm.rmi.iiop.Connection.respondTo(Connection.java:2956)
      at com.ibm.rmi.iiop.Connection.doWork(Connection.java:2823)
      at
  com.ibm.rmi.iiop.WorkUnitImpl.doWork(WorkUnitImpl.java:65)
      at
  com.ibm.rmi.iiop.WorkerThread.run(ThreadPoolImpl.java:193)
      at java.lang.Thread.run(Thread.java:738)
  

Local fix

• Does not affect usage of product.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * Case Manager Client users accessing the In-basket widget     *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * See Error Description                                        *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Update to 5.1.1.3-ICM-FP003 or later.  Make the appropriate  *
  * software requirement changes and configuration changes in    *
  * order for the fix to take effect.                            *
  ****************************************************************
  

Problem conclusion

• Fixed in 5.1.1.3-ICM-FP003 via a configuration setting now
  available on the In-Basket widget.  The change requires that the
  customer is on IBM Case Manager 5.1.1.3 and Process Engine
  5.0.0.5 or later.  After the software requirements are in place,
  the customer needs to select the "Is PE version higher 5.0.0.4"
  check box in the In-basket widget settings.  With the option
  selected, the errors on the Process Engine server logs will be
  eliminated as the change affects how the In-Basket widget
  communicates to the PE server.
  The "Is PE version higher 5.0.0.4" option must be selected for
  each solution, as it pertains to the In-basket widget.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  CASE MGR CLIENT

• Fixed component ID

  5725A1501

Applicable component levels

• R511 PSY

     UP