PM39039: User able to update connection without 'superuser' priveledges

Rational ClearQuest Fix Pack 06 (8.0.0.6) for 8.0
Rational ClearQuest Fix Pack 11 (8.0.0.11) for 8.0
Rational ClearQuest Fix Pack 12 (8.0.0.12) for 8.0
Rational ClearQuest Fix Pack 13 (8.0.0.13) for 8.0
Rational ClearQuest Fix Pack 14 (8.0.0.14) for 8.0
Rational ClearQuest Fix Pack 15 (8.0.0.15) for 8.0
Rational ClearQuest Fix Pack 16 (8.0.0.16) for 8.0
Rational ClearQuest Fix Pack 17 (8.0.0.17) for 8.0
Rational ClearQuest Fix Pack 18 (8.0.0.18) for 8.0
Rational ClearQuest Fix Pack 19 (8.0.0.19) for 8.0
Rational ClearQuest Fix Pack 20 (8.0.0.20) for 8.0
Rational ClearQuest Fix Pack 21 (8.0.0.21) for 8.0

APAR status

• Closed as program error.

Error description

• Windows 7
  ClearQuest 7.1.1.1 and 7.1.1.2
  Out Of The Box Defect Tracking schema
  
  Via the user administrator create or use a CQ User account
  called 'User'
  
  Privileges selected:
  -Active User
  -All Users/Groups Visable
  
  Via Maintenance tool choose any connection and
  UPDATE it. Use a the basic privilege 'User' that was just
  created.
  
  You will see a message stating you need to have superuser
  privileges to move/update
  move/update  but the update connection will complete.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  ClearQuest users are able to update schema repository
  connection information via the Maintenance Tool even without
  "superuser" privileges.
  

Problem conclusion

• A fix is available in ClearQuest 8.0.0.6.
  
  Only ClearQuest users with SuperUser privileges are now able
  to update the schema repository connection information in
  the Maintenance Tool.  If a regular ClearQuest user tries,
  they will get a pop-up message saying "CRMMD1240E Permission
  denied.  This operation can only be performed by a user with
  SuperUser privileges" and it fails.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  CLEARQUEST UNIX

• Fixed component ID

  5724G3601

Applicable component levels

• R701 PSN

     UP