IBM Support

Shared access entitlement by role report fails to run with the Oracle 10g database.

Troubleshooting


Problem

An error occurs when you try to run shared access entitlement by role report with the Oracle 10g database.

Resolving The Problem

You must edit these shared access entitlements by role report files:  
shared_access_entitlement_by_role_master.rptdesign 
shared_access_entitlement_by_role_sub.rptdesign 

Complete these steps:

1. Extract the IBM Security Identity Manager report package in
<IBM Security Identity Manager installationlocation>/extensions/6.0/tcr/tcrpack/tcr_isim6.0_reporting_pack.zip.
For example, tcr_isim6.0_reporting_pack

2. Edit the following report in a XML editor.
shared_access_entitlement_by_role_master.rptdesign 

a. Search the data set key
sharedAccessBasedOnRoleAndEntitlementTypeParameter.

b. Replace this SQL from line number 699 to 709
with Ancestor(ASCENDENT, DESCENDENT, root) AS (
SELECT RI.ASCENDENT, RI.DESCENDENT,ROLE.DN FROM
ROLE_INHERITANCE RI
INNER JOIN ROLE  ON ROLE.DN=RI.DESCENDENT
WHERE ROLE.ERROLENAME LIKE ?
UNION ALL
SELECT RI.ASCENDENT, RI.DESCENDENT, A.root FROM

ROLE_INHERITANCE RI,Ancestor A
WHERE A.ASCENDENT=RI.DESCENDENT
)

with the following SQL

with Ancestor as (
SELECT RI.ASCENDENT, RI.DESCENDENT,
RI.DESCENDENT as root
FROM ROLE_INHERITANCE RI
INNER JOIN ROLE
ON ROLE.DN = RI.DESCENDENT
START WITH ROLE.ERROLENAME LIKE ?
CONNECT BY PRIOR RI.ASCENDENT = RI.DESCENDENT
)
c. Save the report file.

3. Edit the following report in a XML editor.
shared_access_entitlement_by_role_sub.rptdesign

a. Search and replace the method getOrgHierarchySql()with:
function getOrgHierarchySql()
{ var hsql = Packages.java.lang.StringBuffer();
hsql.append("with OrgHierarchy AS (SELECT ORG.NAME,

ORG.DN FROM SA_EVALUATION_BU_HIERARCHY BU_H  INNER
JOIN ORGANIZATIONALCONT0 ORG ON
ORG.DN = BU_H.CHILD_DN WHERE
BU_DN=('"+policyBuDn+"')
UNION  SELECT ORG.NAME, ORG.DN FROM
ORGANIZATIONALCONT0 ORG WHERE DN=('"+policyBuDn
+"'))");
return hsql;
}

b. Save the report file.

4. Archive the updated report files in the folder that is extracted in step 1 to create a compressed file. For example, tcr_isim6.0_reporting_pack.zip.

5. Import the report package into Tivoli Common Reporting.

[{"Product":{"code":"SSRMWJ","label":"IBM Security Identity Manager"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"Server","Platform":[{"code":"PF016","label":"Linux"}],"Version":"6.0","Edition":"All Editions","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
16 June 2018

UID

swg21607850