IV28701: NAVIGATOR WIDGET FAILS IF USER IS NOT IN J2EE ADMINISTRATOR ROLE.

APAR status

• Closed as program error.

Error description

• If you log in to the Business Space UI as a user which does
  not have J2EE administrator authority, the navigator widget does
  not work.
  

Local fix

Problem summary

• ****************************************************************
  USERS AFFECTED:
  All users of WebSphere Service and Repository Server Version
  8.0.0
  
  ****************************************************************
  PROBLEM SUMMARY:
  
  This fix is superseded by APAR IV47749
  When using Business Space, a user may have the following error
  message appear when using the Navigator widget:
  
  00000025 webapp E com.ibm.ws.webcontainer.webapp.WebApp
  logServletError SRVE0293E: [Servlet Error]-[Content]:
  javax.ejb.AccessLocalException: ; nested exception is:
  com.ibm.websphere.csi.CSIAccessException: SECJ0053E:
  Authorization failed for defaultWIMFileBasedRealm/aDeveloper
  while invoking
  (Bean)ServiceRegistry#ServiceRegistryAPIEJB.jar#ServiceRegistryA
  dmin
  retrieveConfigurationObject:java.lang.String,com.ibm.serviceregi
  stry.admin.ConfigurationType:3 is not granted any of the
  required roles: Administrator
  com.ibm.websphere.csi.CSIAccessException: SECJ0053E:
  Authorization failed for defaultWIMFileBasedRealm/aDeveloper
  while invoking
  (Bean)ServiceRegistry#ServiceRegistryAPIEJB.jar#ServiceRegistryA
  dmin
  retrieveConfigurationObject:java.lang.String,com.ibm.serviceregi
  stry.admin.ConfigurationType:3 is not granted any of the
  required roles: Administrator at
  com.ibm.ws.security.core.SecurityCollaborator.performAuthorizati
  on(SecurityCollaborator.java:625) at
  com.ibm.ws.security.core.EJSSecurityCollaborator.preInvoke(EJSSe
  curityCollaborator.java:265) at
  com.ibm.ejs.container.EJSContainer.preInvokeAfterActivate(EJSCon
  tainer.java:4193) at
  com.ibm.ejs.container.EJSContainer.preInvoke(EJSContainer.java:3
  379) at
  com.ibm.serviceregistry.EJSLocalStatelessServiceRegistryAdmin_74
  da41e1.retrieveConfigurationObject(EJSLocalStatelessServiceRegis
  tryAdmin_74da41e1.java:640) at
  com.ibm.sr.data.servlet.NavigatorWidgetDataHandler.checkForBusin
  essSpaceConfigurationUpdates(NavigatorWidgetDataHandler.java:720
  ) at
  com.ibm.sr.data.servlet.NavigatorWidgetDataHandler.retrieveObjec
  ts(NavigatorWidgetDataHandler.java:350) at
  com.ibm.sr.data.servlet.NavigatorWidgetDataHandler.doGet(Navigat
  orWidgetDataHandler.java:253) at
  com.ibm.sr.data.servlet.Content.doGet(Content.java:167) at
  javax.servlet.http.HttpServlet.service(HttpServlet.java:575)
  at
  javax.servlet.http.HttpServlet.service(HttpServlet.java:668)
  at
  com.ibm.ws.webcontainer.servlet.ServletWrapper.service(ServletWr
  apper.java:1224)
  
  This error is caused due to a permissions issue with the methods
  used by the Navigator widget, with only administrative users
  having the permissions to use the methods called by the widget.
  

Problem conclusion

• This fix is superseded by APAR IV47749
  The methods used by the navigator widget have been updated,
  allowing any authenticated user to call the required methods
  used by the Navigator widget.
  
  This fix is targeted for inclusion in WSRR v8.0.0.2
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SERVICE REGISTR

• Fixed component ID

  5724N7200

Applicable component levels

• R800 PSY

     UP