JR50399: FULL STACK TRACE NOT NECESSARY FOR SERVLET RESPONSE

8.5.0.1-WS-BPM-IFJR50399
Version 8.5 Refresh Pack 6 for the IBM Business Process Manager products
Version 8.5.0 Fix Pack 2 for the IBM Business Process Manager products

APAR status

• Closed as program error.

Error description

• When a document content mime type cannot be uploaded to the
  server, the error message that the ECMDocumentServlet generates
  contains a full stack trace, which is extraneous information.
  
  The following error message is shown when the image or .png mime
  type is not on the list of accepted mime types:
  
  java.lang.SecurityException: Document Attachment document
  mime-type image/png is not accepted for upload to the server
  
  PRODUCTS AFFECTED:
  IBM Business Process Manager (BPM) Advanced
  IBM BPM Standard
  IBM BPM Express
  

Local fix

Problem summary

• The error returned from the servlet when creating or updating a
  document by using the document list coach view is not possible
  because the content was not accepted to be uploaded (white list
  filter). The error contains the entire stack trace, which is not
  necessary.
  

Problem conclusion

• A fix is available for IBM BPM V8.5.0.1  that removes the stack
  trace from the servlet response so that only the message part of
  the error appears.
  
  On Fix Central (http://www.ibm.com/support/fixcentral), search
  for JR50399:
  
  1. Select IBM Business Process Manager and then Advanced from
  the product selector, the installed version to the fix pack
  level, and your platform, and then click Continue.
  2. Select APAR or SPR, enter JR50399, and click Continue.
  
  When you download fix packages, ensure that you also download
  the readme file for each fix. Review each readme file for
  additional installation instructions and information about the
  fix.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

  JR50092

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  BPM STANDARD

• Fixed component ID

  5725C9500

Applicable component levels

• R850 PSY

     UP