PK80615: NEW ACCESS CONTROL CONFIGURATION OPTIONS FOR LARGE USER TO ROLE MAP HANDLING

6.0.1.7 Download: WebSphere Portal and Web Content Manager V6.0.1, fix pack 7

APAR status

• Closed as program error.

Error description

• Portal Access Control performance issue during syndication when
  large amount of user-to-role mappings exists, e.g. for the all
  authenticated user group.
  CAUTION: Do not enable the configuration setting as listed in
  the readme file (accesscontrol.rolemapoptimization.enabled) as
  this will cause funtional issues during runtime.
  

Local fix

Problem summary

• Portal Access Control performance issue during syndication
  when large amount of user-to-role mappings exists, e.g. for the
  all authenticated user group.
  
  The APAR introduces new configuration settings that enable
  the syndication target server to optimize the access control
  user-to-role mappings for a single principal and action set
  (e.g. all Contributor role mappings for the portal all
  authenticated users group).
  

Problem conclusion

• The following configuration settings have to be added through
  the WAS Admin console resource environment provider for the 'WP
  ConfigService':
  
     accesscontrol.rolemapoptimization.enabled=true
     accesscontrol.rolemapoptimization.principal=<user/group
  unique ID> e.g.'all authenticated portal users'
     accesscontrol.rolemapoptimization.actionset=<pac action set>
  e.g.'Contributor'
     accesscontrol.rolemapoptimization.resourcetype=<pac resource
  type> e.g.'ICM_CONTENT'
  
  After portal restart, all role mappings created for the
  specified principal/resourcetype/action set are moved to the
  owner field of the resource.
  If the owner rights for the resource type are specified
  accordingly, this setting will result in the same runtime
  behavior, while reducing the number of rows in the database to
  be loaded.
  
  Failing Module(s):
     Portal Access Control
  
  Affected Users:
     All Users
  
  Version Information:
      Portal Version(s): 6.0.1.3
       Pre-Requisite(s): PK75134
        Co-Requisite(s): ---
  
      Portal Version(s): 6.0.1.4
       Pre-Requisite(s): PK75134
        Co-Requisite(s): ---
  
      Portal Version(s): 6.0.1.5
       Pre-Requisite(s): PK75134
        Co-Requisite(s): ---
  
  Platform Specific:
     This fix applies to all platforms.
  
  A fix is available from Fix Central:
  
  http://www.ibm.com/eserver/support/fixes/fixcentral/swgquickorde
  r?apar=PK80615&productid=WebSphere%20Portal&brandid=5
  
  You may need to type or paste the complete address into your Web
  browser.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBSPHERE PORTA

• Fixed component ID

  5724E7600

Applicable component levels

• R60G PSY

     UP

• R60H PSY

     UP

• R60J PSY

     UP