IBM Support

PM09199: CHANGING THE DEFAULT SECURITY SETUP FOR WEBDAV FILE STORE

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • Currently, by default, all authenticated users can perform write
    operations on specific folders of the WebDAV file store (public
    and user owned folders), as described here:
                    http://publib.boulder.ibm
    .com/infocenter/wpdoc/v6r1/topic/com.ibm.wp.ent
    .doc_v615/admin/mash_webdav_store.html
    This fix will change that default so that only admin users can
    perform write operations to those folders.
    In order to enable access for all authenticated users again,
    please add the following custom property through WAS admin
    console
    resource environment provider 'WP ConfigService':
      filestore.writeaccess.allowed= true
    Please restart portal server after this change.
    

Local fix

Problem summary

  • Currently, by default, all authenticated users can perform write
    operations on specific folders of the WebDAV file store (public
    and user owned folders), as described here:
    
    
    http://publib.boulder.ibm.com/infocenter/wpdoc/v6r1/topic/com.ib
    m.wp.ent.doc_v615/admin/mash_webdav_store.html
    
    This fix will change that default so that only admin users
    can perform write operations to those folders.
    In order to enable access for all authenticated users again,
    please add the following custom property through WAS admin
    console resource environment provider 'WP ConfigService':
    
          filestore.writeaccess.allowed=true
    
    Please restart portal server after this change.
    

Problem conclusion

Temporary fix

Comments

APAR Information

  • APAR number

    PM09199

  • Reported component name

    WEBSPHERE PORTA

  • Reported component ID

    5724E7600

  • Reported release

    61C

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2010-03-08

  • Closed date

    2010-04-08

  • Last modified date

    2010-04-08

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    WEBSPHERE PORTA

  • Fixed component ID

    5724E7600

Applicable component levels

  • R615 PSY

       UP

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSHRKX","label":"WebSphere Portal"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"6.1.0.3","Edition":"","Line of Business":{"code":"","label":""}}]

Document Information

Modified date:
08 April 2010