APAR status
Closed as program error.
Error description
Abstract: ZONEEDIT : REMOVE ZONE IS POSSIBLE EVEN IF REQUIRED PRIVILEGES ARE REVOKED Prerequisite: Create a new context in P&O and revoke ENOVIA_VPMZone.RemoveZone privilege for it. Scenario: 1. Login Login with the above created P&O context. 2. Create a PRC and send it to Product Editor. 3. Select PRC and send it to Zone Editor. 4. Create a new Zone. 5. Save. 6. Select the zone, right click and select "Remove Zone". Result: Zone is successfully removed, even if the required privilege to do so is revoked in P&O. The list of PRIVILEGES for customer's context: ================================ *PRIV 1;CTX=VIEWER.MAIN.DEFAULT;PROCESS=VPM.LO GIN *PRIV 1;CTX=VIEWER.MAIN.DEFAULT;PROCESS_GROUP= PeopleClientGlobal *PRIV 1;CTX=VIEWER.MAIN.DEFAULT;PROCESS=VPM.EN OVIA_VPMZone.Modify;GLOBAL;MyOrgData *PRIV 1;CTX=VIEWER.MAIN.DEFAULT;PROCESS=VPM.EN OVIA_VPMDocumentRevision.Read;GLOBAL;MyOrg Data *PRIV 1;CTX=VIEWER.MAIN.DEFAULT;PROCESS=VPM.EN OVIA_VPMDocumentRevision.Read;COND; TemplateOrgData *PRIV 1;CTX=VIEWER.MAIN.DEFAULT;PROCESS=VPM.EN OVIA_VPMProductClass.OpenProductClass;GLOBAL; MyOrgData *PRIV 1;CTX=VIEWER.MAIN.DEFAULT;PROCESS=VPM.EN OVIA_VPMProductRootClass.AddChildDoc;GLOBAL; MyOrgData *PRIV 1;CTX=VIEWER.MAIN.DEFAULT;PROCESS=VPM.EN OVIA_VPMContext.Create *PRIV 1;CTX=VIEWER.MAIN.DEFAULT;PROCESS=VPM.EN OVIA_VPMContext.Delete;GLOBAL;MyOrgData *PRIV 1;CTX=VIEWER.MAIN.DEFAULT;PROCESS=VPM.EN OVIA_VPMContext.Delete;COND;TemplateOrgData *PRIV 1;CTX=VIEWER.MAIN.DEFAULT;PROCESS=VPM.EN OVIA_VPMContext.LoadContext;GLOBAL;MyOrgDat a *PRIV 1;CTX=VIEWER.MAIN.DEFAULT;PROCESS=VPM.EN OVIA_VPMContext.LoadContext;COND;TemplateOr gData *PRIV 1;CTX=VIEWER.MAIN.DEFAULT;PROCESS=VPM.EN OVIA_VPMContext.Modify;GLOBAL;MyOrgData *PRIV 1;CTX=VIEWER.MAIN.DEFAULT;PROCESS=VPM.EN OVIA_VPMContext.Modify;COND;TemplateOrgData ================================ The result on server trace from the customer is : VpmSCManager CATVpmSCManager::CheckDataAccess (obj,RegMeth)() { VpmSCManager : --------------------------------------- ------ VpmSCManager : CATVpmSCManager::CheckState () { VpmSCManager : : CheckState(Login OK) / Login OK : Ok VpmSCManager : } VpmSCManager : Class : ENOVIA_VPMZone [cia productIdentifier8989] VpmSCManager : Method : RemoveZone VpmSCManager : - secured VpmSCManager : - conditional VpmSCManager : Trying on attributes ... VpmSCManager : - user = VpmSCManager : - org = VpmSCManager : Security process : ENOVIA_VPMZone.RemoveZone VpmSCManager : CATVpmSCManager::CheckDataAccess (A.F.C,user,org)() { VpmSCManager : : Process: ENOVIA_VPMZone.RemoveZone VpmSCManager : : User : V085703 VpmSCManager : : Org : MAIN VpmSCManager : : CATVpmSCManager::CheckState() { VpmSCManager : : : CheckState(Login OK) / Login OK : Ok VpmSCManager : : } VpmSCManager : : 1. Is the process refered by your privileges ? VpmSCManager : : CATVpmSCManager::GetCheckA_Processes() { VpmSCManager : : : recherche command: ENOVIA_VPMZone::RemoveZone VpmSCManager : : } VpmSCManager : : ==> NO ! VpmSCManager : : ==> You are not granted permission to process [ENOVIA_VPMZone.RemoveZone] VpmSCManager : } VpmSCManager : ==> Access: DENIED VpmSCManager : ==> You are not granted permission to process [ENOVIA_VPMZone.RemoveZone] .
Local fix
Problem summary
ZONEEDIT : REMOVE ZONE IS POSSIBLE EVEN IF REQUIRED PRIVILEGES ARE REVOKED Abstract: ZONEEDIT : REMOVE ZONE IS POSSIBLE EVEN IF REQUIRED PRIVILEGES ARE REVOKED Prerequisite: Create a new context in P&O and revoke ENOVIA_VPMZone.RemoveZone privilege for it. Scenario: 1. Login Login with the above created P&O context. 2. Create a PRC and send it to Product Editor. 3. Select PRC and send it to Zone Editor. 4. Create a new Zone. 5. Save. 6. Select the zone, right click and select "Remove Zone". Result: Zone is successfully removed, even if the required privilege to do so is revoked in P&O. The list of PRIVILEGES for customer's context: ================================ *PRIV 1;CTX=VIEWER.MAIN.DEFAULT;PROCESS=VPM.LO GIN *PRIV 1;CTX=VIEWER.MAIN.DEFAULT;PROCESS_GROUP= PeopleClientGlobal *PRIV 1;CTX=VIEWER.MAIN.DEFAULT;PROCESS=VPM.EN OVIA_VPMZone.Modify;GLOBAL;MyOrgData *PRIV 1;CTX=VIEWER.MAIN.DEFAULT;PROCESS=VPM.EN OVIA_VPMDocumentRevision.Read;GLOBAL;MyOrg Data *PRIV 1;CTX=VIEWER.MAIN.DEFAULT;PROCESS=VPM.EN OVIA_VPMDocumentRevision.Read;COND; TemplateOrgData *PRIV 1;CTX=VIEWER.MAIN.DEFAULT;PROCESS=VPM.EN OVIA_VPMProductClass.OpenProductClass;GLOBAL; MyOrgData *PRIV 1;CTX=VIEWER.MAIN.DEFAULT;PROCESS=VPM.EN OVIA_VPMProductRootClass.AddChildDoc;GLOBAL; MyOrgData *PRIV 1;CTX=VIEWER.MAIN.DEFAULT;PROCESS=VPM.EN OVIA_VPMContext.Create *PRIV 1;CTX=VIEWER.MAIN.DEFAULT;PROCESS=VPM.EN OVIA_VPMContext.Delete;GLOBAL;MyOrgData *PRIV 1;CTX=VIEWER.MAIN.DEFAULT;PROCESS=VPM.EN OVIA_VPMContext.Delete;COND;TemplateOrgData *PRIV 1;CTX=VIEWER.MAIN.DEFAULT;PROCESS=VPM.EN OVIA_VPMContext.LoadContext;GLOBAL;MyOrgDat a *PRIV 1;CTX=VIEWER.MAIN.DEFAULT;PROCESS=VPM.EN OVIA_VPMContext.LoadContext;COND;TemplateOr gData *PRIV 1;CTX=VIEWER.MAIN.DEFAULT;PROCESS=VPM.EN OVIA_VPMContext.Modify;GLOBAL;MyOrgData *PRIV 1;CTX=VIEWER.MAIN.DEFAULT;PROCESS=VPM.EN OVIA_VPMContext.Modify;COND;TemplateOrgData ================================ The result on server trace from the customer is : VpmSCManager
Problem conclusion
THIS PROBLEM WILL BE FIXED ON ENOVIA VERSION 5 RELEASE 15 GA level. NOTE THAT THIS PROBLEM WILL ALSO BE FIXED ON V5R14SP02 AND ALSO ON V5R13SP07 AND V5R12SP10. .
Temporary fix
TE512 ARY FIX: none
Comments
APAR Information
APAR number
HD27694
Reported component name
ENOVIA LCA NT/2
Reported component ID
569151700
Reported release
512
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt
Submitted date
2004-09-10
Closed date
2004-09-29
Last modified date
2009-06-24
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fix information
Fixed component name
ENOVIA LCA NT/2
Fixed component ID
569151700
Applicable component levels
R512 PSN SP51210
UP04/12/14 I 1000
R513 PSN SP51307
UP04/11/05 N 1000
R514 PSN
UP
[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSDJRN","label":"ENOVIA LCA"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"512","Edition":"","Line of Business":{"code":"","label":""}}]
Document Information
Modified date:
24 June 2009