JR49994: THE ACTION_REASSIGN_TASK_USER_ROLE POLICY DOES NOT CONSTRAIN TASK OWNERS FROM REASSIGNING A TASK

Version 8.5 Refresh Pack 5 for the IBM Business Process Manager products
Version 8.5.0 Fix Pack 2 for the IBM Business Process Manager products

APAR status

• Closed as program error.

Error description

• The authorization implementation allows a task owner to reassign
  a claimed task to another member of the team that is associated
  with the task. However, task owners cannot be prevented from
  using this capability.
  

Local fix

Problem summary

• When the authorization logic was revised for IBM BPM V8.5, the
  evaluation of the ACTION_REASSIGN_TASK_USER_ROLE
  authorization policy for task reassignment was removed.
  Therefore, constraints that are defined for this policy are no
  longer considered when a task is reassigned.
  

Problem conclusion

• A fix is available for IBM BPM V8.5.0.1. The authorization logic
  for a task reassignment that a task owner initiates now
  considers  the constraints that are defined for the
  ACTION_REASSIGN_TASK_USER_ROLE policy. However, the policy
  continues to be disregarded when task reassignment is initiated
  by a manager who is defined for a team, according to the team
  and team manager concept that was introduced with IBM BPM V8.5.
  
  On Fix Central (http://www.ibm.com/support/fixcentral), search
  for JR49994:
  
  1. Select IBM Business Process Manager with your edition from
   the product selector, the installed version to the fix pack
   level, and your platform, and then click Continue.
  
  2. Select APAR or SPR, enter JR49994, and click Continue.
  
  When you download fix packages, ensure that you also download
  the readme file for each fix. Review each readme file for
  additional installation instructions and information about the
  fix.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  BPM STANDARD

• Fixed component ID

  5725C9500

Applicable component levels

• R850 PSY

     UP