IBM Support

IT26651: PUREAPPLICATION: THE ORIGINAL DEPLOYMENT ID IS REMOVED FROM "ACCESS GRANTED TO" AND CAN NOT BE ADDED BACK IN THE GUI

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

 

APAR status

  • Closed as program error.

Error description

  • A virtual system is deployed by ID 'A'.  This automatically
    places ID 'A' in the "Access Granted to" field of the virtual
    system with full access.  Later, ID 'A' is removed from the
    field.  The user tries to add back ID 'A' to the "Access
    Granted to" field, but ID 'A' will not show in the list of
    choices and cannot be added back to "Access Granted to" via the
    user interface.
    
    ID 'A' will no longer be able to view the "History" details of
    the virtual system, nor perform other tasks.
    

Local fix

  • The PureApplication Command Line Interface (CLI) tool may be
    used to add the ID back to the "Access Granted to" field:
    
    Start an interactive CLI session with the PureApp device and
    issued the following commands, where:
    
     "bob-l2" is the ID that was used to deploy the virtual system
    instance and was removed from "Access Granted to"
    
    "Test-vsys" is the name of the virtual system
    
    C:\pure.cli\bin> pure -a -h <PureIPAddr> -u admin -p <password>
    >>> x=deployer.virtualsysteminstances.list({"deployment_name":
    "Test-vsys"})
    
    >>> vsys[0].acl
    {
      (user becca-l2): read
    }
    
    >>> x[0].acl[deployer.users.list({"username":"bob-l2"})[0]] =
    deployer.DELETE_PERMISSION
    
    >>> x[0].acl
    {
      (user becca-l2): read,
      (user bob-l2): all
    }
    >>>
    

Problem summary

  • The original Deployment ID is removed from "Access Granted To"
    and cannot be added back in the GUI.
    

Problem conclusion

  • If an owner (user who deployed the instance) is removed from the
     Access control list in the Access control widget of the VSys
    instance page, then he cannot be added back through the widget
    as his userid doesn?t appear in the acl choices list - The
    reported issue has been fixed on the Cloud Pak System 2.3.1.0
    level.
    

Temporary fix

Comments

APAR Information

  • APAR number

    IT26651

  • Reported component name

    PUREAPP SOFTWAR

  • Reported component ID

    5725Q5200

  • Reported release

    224

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2018-10-17

  • Closed date

    2019-12-03

  • Last modified date

    2019-12-03

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    PUREAPP SOFTWAR

  • Fixed component ID

    5725Q5200

Applicable component levels

[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSL5ES","label":"PureApplication Software"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"224","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
03 December 2019