IBM Support

PM80171: User can go ahead to delete multiple artifacts without DELETE permission given (WI 69635)

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED:                                              *
    ****************************************************************
    * PROBLEM DESCRIPTION:                                         *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    The default settings for the checkPermissions request logic
    will stop any related requests from being run if the
    permission check fails. For a bulk Request (such as
    multi-delete Artifacts), the checkPermissions logic for all
    the Artifacts-to-be-deleted is run in a single
    pre-processing phase. The code is checking the permissions
    for more than one Artifact Type and so there will be more
    than one checkPermssions request in the pre-processing
    phase. As soon as one checkPermissions request fails, it
    bubbles up and stops the pre-processing phase.
    Unfortunately, stopping the pre-processing phase here means
    that other checkPermissions requests aren't being executed
    (ie for other Artifact Types). Although the pre-processing
    phase has terminated early, it doesn't stop the main bulk
    request from executing. So the failures from the 1st failing
    checkPermissions request will have been treated properly and
    the corresponding deletes won't be carried into the main
    request. But the other deletes won't have been permission
    checked (the pre-processor exited early) and so the
    corresponding Artifact Deletes will be free to run in the
    main bulk request.
    

Problem conclusion

  • This change will be available in RRC 4.0.2.
    

Temporary fix

Comments

APAR Information

  • APAR number

    PM80171

  • Reported component name

    RATL REQ COMP S

  • Reported component ID

    5724W8701

  • Reported release

    401

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2013-01-08

  • Closed date

    2013-03-15

  • Last modified date

    2013-03-15

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    RATL REQ COMP S

  • Fixed component ID

    5724W8701

Applicable component levels

  • R401 PSN

       UP

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSWMEQ","label":"Rational Requirements Composer"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"4.0.1","Line of Business":{"code":"LOB02","label":"AI Applications"}}]

Document Information

Modified date:
29 October 2021