JR46791: MODIFYING PARTICIPANTGROUP MEMBERSHIP IN PROCESSADMIN CONSOLE, ARTIFACTS IN TOOLKITS MAY BE EXPOSED TO THE WRONG GROUP OF USERS

Download Version 8.0.1 Fix Pack 2 for the IBM Business Process Manager products
Version 7.5.1 Fix Pack 2 for the IBM Business Process Manager products
Version 8.5 Refresh Pack 5 for the IBM Business Process Manager products

APAR status

• Closed as program error.

Error description

• In certain cases, modifying the ParticipantGroup/Team
  membership at runtime is not accurate for toolkit artifacts
  such as BPDs, HumanServices, EPVs, etc.
  It's possible to modify the group membership in the ProcessAdmin
  console for a particular ProcessApp snapshot, changing the group
  membership for all running and future instances.
  
  For ParticipantGroups/Teams modeled in a toolkit, the group
  membership is not accurately updated.
  This leads to situations where a BPD, EPV, etc.  are exposed to
  the wrong group of users.  Users may not see artifacts they're
  authorized too, or they may see artifacts they're not
  authorized too.
  

Local fix

Problem summary

• In certain cases, modifying the ParticipantGroup membership at
  runtime may expose artifcats in toolkits to the wrong group of
  users.
  

Problem conclusion

• When a toolkit dependency is added, a single internal group is
  created for each ParticipantGroup.  When the ParticipantGroup
  membership is updated at runtime, the changes are valid for all
  artifacts exposed to this ParticipantGroup, regardless of where
  it's modeled.
  
  Problem will be fixed with V801 FP2
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

  JR46780

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  BPM ADVANCED

• Fixed component ID

  5725C9400

Applicable component levels

• R801 PSY

     UP