PM05912: Missing Access Control check for deleting portlet entities from the PortletModel

APAR status

• Closed as program error.

Error description

• The PortletModelController lacks an access control check for
  deleting portlets from the portlet model. Portlet entities
  usually get deleted by a scheduled maintenance task, not by a
  user.
  

Local fix

• n/a
  

Problem summary

• The PortletModelController lacks an access control check for
  deleting portlets from the portlet model.
  Portlet entities usually get deleted by a scheduled
  maintenance task, not by a user.
  

Problem conclusion

• The delete code now throws an exception.
  
  Failing Module(s):
     Engine: Page Assembly
  
  Affected Users:
     Portlet developers
  
  Version Information:
     Portal Version(s): 6.1.0.3
      Pre-Requisite(s): ---
       Co-Requisite(s): ---
  
  Manuel Steps:
     None
  
  Platform Specific:
     This fix applies to all platforms.
  
  PM05912 is part of Cumulative Fix 04 for Portal 6.1.0.3 /
  6.1.5.0.
  
  The Cumulative Fix is available on Fix Central:
  
  http://www.ibm.com/eserver/support/fixes/fixcentral/swgquickorde
  r?apar=PM11273&productid=WebSphere%20Portal&brandid=5
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBSPHERE PORTA

• Fixed component ID

  5724E7699

Applicable component levels

• R61C PSY

     UP