JR53563: PROCESS INSPECTOR IN PROCESS ADMIN CONSOLE ALLOWS ADMINISTRATORS TO ACCESS INSTANCE DATA

8.5.0.1-WS-BPM-IFJR53563
Version 8.5.0 Fix Pack 2 for the IBM Business Process Manager products
Version 8.5 Refresh Pack 7 for the IBM Business Process Manager products

APAR status

• Closed as program error.

Error description

• Process Inspector on the Process Admin Console allows
  administrators to access instance data if interim fix JR48078 is
  applied. This behavior was enforced and is not configurable.
  However, applying this interim fix also introduces a
  configurable option so that you can allow or refuse
  administrators access to process instance data from the Process
  Inspector on the Process Admin Console.
  

Local fix

Problem summary

• No additional information is available.
  

Problem conclusion

• A fix is/will be available for IBM BPM that introduces the
  following configuration flag in the 100Custom.xml file to
  disable the administrator's ability to view and edit task data:
  
  <server>
   <portal merge="mergeChildren">
    <authorization-enabled-for-admins-to-get-set-task-data>
     noadmins
    </authorization-enabled-for-admins-to-get-set-task-data>
   </portal>
  </server>
  
  If the setting is not set, which is the default, or set to
  admins, the earlier behavior is maintained, allowing
  administrators to view and edit task-related data.
  
  On Fix Central (http://www.ibm.com/support/fixcentral), search
  for JR53563:
  
  1. Select IBM Business Process Manager with your edition from
    the product selector, the installed version to the fix pack
    level, and your platform, and then click Continue.
  
  2. Select APAR or SPR, enter JR53563, and click Continue.
  
  When you download fix packages, ensure that you also download
  the readme file for each fix.Review each readme file for
  additional installation instructions and information about the
  fix.
  

Temporary fix

• Not applicable
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  BPM STANDARD

• Fixed component ID

  5725C9500

Applicable component levels

• R850 PSY

     UP

• R856 PSY

     UP