PK97348: ADD NEW CONFIGURATION FOR PUMA SERVICE TO DISABLE ACCESS CONTROL ENFORCEMENT FOR READ OPERATIONS

APAR status

• Closed as program error.

Error description

• People Finder responds slowly to a search request.
  
  This APAR adds a new configuration for the portal 'WP
  PumaStoreService' to disable access control enforcement for
  read operations. This will improve performance for search
  operations, but at the same time grant read access to users and
  user groups for all authenticated and anonymous users in the
  system.
  
  New Setting:
  
  'WP PumaStoreService':
  Property: store.puma_default.disableACforRead
  Value: true/false (default = false)
  
  Setting this property to true grants authenticated users and
  the anonymous user access to view all users, user groups and
  their attributes. All read operations against PUMA APIs on users
  and user groups are not access control enforced any more.
  
  To change or add the settings, use the WAS administrative
  console under. Select Resource Environment Providers -> 'WP
  PumaStoreService' -> Custom Properties.
  
  Note that this APAR fis will not be included in future fixpacks
  or versions of WebSphere Portal, as starting with version
  6.1.0.2, a performance enhancements through virtual resources is
  available.
  

Local fix

Problem summary

• When customer performs a search in the people finder portlet, it
  seems to take a long time.
  

Problem conclusion

• This APAR adds a new configuration for the portal 'WP
  PumaStoreService' to disable access control enforcement for read
  operations. This will improve performance for search operations,
  but at the same time grant read access to users and user groups
  for all authenticated and anonymous users in the system.
  
     New Setting:
  
     'WP PumaStoreService':
       Property: store.puma_default.disableACforRead
       Value: true/false (default = false)
  
  Setting this property to true grants authenticated users and the
  anonymous user access to view all users, user groups and their
  attributes. All read operations against PUMA APIs on users and
  user groups are not access control enforced any more.
  
  To change or add the settings, use the WAS administrative
  console under. Select Resource Environment Providers -> 'WP
  PumaStoreService' -> Custom Properties.
  
  Manual Steps:
     None
  
  Failing Module(s):
     Portal Access Control
  
  Affected Users:
     All Users
  
  Version Information:
      Portal Version(s): 6.1.0.1
       Pre-Requisite(s): PK96055 PK86483
        Co-Requisite(s): ---
  
  Platform Specific:
     This fix applies to all platforms.
  
  A fix is available from Fix Central:
  
  http://www.ibm.com/eserver/support/fixes/fixcentral/swgquickorde
  r?apar=PK97348&productid=WebSphere%20Portal&brandid=5
  
  You may need to type or paste the complete address into your Web
  browser.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBSPHERE PORTA

• Fixed component ID

  5724E7600

Applicable component levels

• R61A PSY

     UP