PH39525: UNABLE TO DEPLOY WITHOUT PERMISSION ON UNUSED RESOURCES

APAR status

• Closed as program error.

Error description

• An attempt to initiate a deployment from UI fails when a user
  does not have read permissions to all component resources on an
  application environment (those that are linked to components
  where users have read permissions), even if the application
  process does not deploy that component at all.
  
  In the UI deployment wizard page "Verify properties" a message
  is shown : "Error Loading Properties. Retry?"
  In the deployserver.out log the following error is logged :
  2021-07-09 12:57:15,382 CEST ERROR
  https-jsse-nio-0.0.0.0-8443-exec-8
  com.urbancode.ds.web.rest.mappers.SecurityExceptionMapper - User
  'user1' does not have read permission to a Resource: ComponentB
  
  1.	Login with "admin" user.
  2.	Create a user "user1" and a role "testRole" and assign all
  View and Execute permissions to the role
  3.	Create a team "Team1"
  4.	Add the user "user1" to the team "Team1"
  5.	Create a ComponentA and add the team "Team1".
  6.  Create a ComponentB and make sure to also add the team
  "Team1".
  7.	Create an application "App1" and add the team "Team1".
  8.	Add the two components to the application "App1".
  9.	Create an environment and the team "Team1". Add resource
  ComponentA with the "Team1". Add also resource ComponentB but
  without the team "Team1".
  10.	Create an application process which installs only one
  component ComponentA.
  11.	Login with the user "user1".
  12.	Try to run the application deployment. In the "Verify
  properties" page a message is shown : "Error Loading Properties.
  Retry?"
  13. In the deployserver.out log the following error is logged :
  2021-07-09 12:57:15,382 CEST ERROR
  https-jsse-nio-0.0.0.0-8443-exec-8
  com.urbancode.ds.web.rest.mappers.SecurityExceptionMapper - User
  'user1' does not have read permission to a Resource: ComponentB
  
  Expectation: user1 should not be blocked and should be able to
  run application process to deploy ComponentA.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * Deploy Server Web UI users                                   *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * An attempt to initiate a deployment from UI fails when a     *
  * user                                                         *
  * does not have read permissions to all component resources on *
  * an                                                           *
  * application environment (those that are linked to components *
  * where users have read permissions), even if the application  *
  * process does not deploy that component at all.               *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Fix is provided in IBM UrbanCode Deploy 7.2.2.1              *
  ****************************************************************
  

Problem conclusion

• Fix is provided in IBM UrbanCode Deploy 7.2.2.1
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  UC DEPLOY

• Fixed component ID

  5725M5400

Applicable component levels