Fixes are available
APAR status
Closed as program error.
Error description
User may be able to delete artifacts without permissions when selecting multiple artifacts using the JKE project template. Refer to the following defect work item for details: https://jazz.net/jazz03/resource/itemName/com.ibm.team.workitem. WorkItem/69635
Local fix
Problem summary
**************************************************************** * USERS AFFECTED: * **************************************************************** * PROBLEM DESCRIPTION: * **************************************************************** * RECOMMENDATION: * **************************************************************** The default settings for the checkPermissions request logic will stop any related requests from being run if the permission check fails. For a bulk Request (such as multi-delete Artifacts), the checkPermissions logic for all the Artifacts-to-be-deleted is run in a single pre-processing phase. The code is checking the permissions for more than one Artifact Type and so there will be more than one checkPermssions request in the pre-processing phase. As soon as one checkPermissions request fails, it bubbles up and stops the pre-processing phase. Unfortunately, stopping the pre-processing phase here means that other checkPermissions requests aren't being executed (ie for other Artifact Types). Although the pre-processing phase has terminated early, it doesn't stop the main bulk request from executing. So the failures from the 1st failing checkPermissions request will have been treated properly and the corresponding deletes won't be carried into the main request. But the other deletes won't have been permission checked (the pre-processor exited early) and so the corresponding Artifact Deletes will be free to run in the main bulk request.
Problem conclusion
This change will be available in RRC 4.0.2.
Temporary fix
Comments
APAR Information
APAR number
PM80171
Reported component name
RATL REQ COMP S
Reported component ID
5724W8701
Reported release
401
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt
Submitted date
2013-01-08
Closed date
2013-03-15
Last modified date
2013-03-15
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fix information
Fixed component name
RATL REQ COMP S
Fixed component ID
5724W8701
Applicable component levels
R401 PSN
UP
[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSWMEQ","label":"Rational Requirements Composer"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"4.0.1","Line of Business":{"code":"LOB02","label":"AI Applications"}}]
Document Information
Modified date:
29 October 2021