IBM Support

JR54329: LONG RUN TIMES OCCUR BECAUSE AUTHORIZATION CODE INCLUDES FREQUENT GROUP MEMBERSHIP LOOKUPS

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

APAR status

  • Closed as program error.

Error description

  • In the AuthorizationAPICore class, the
    listCurrentUserGroupMemberships method is used, which causes
    long run times for users who are in many groups.
    

Local fix

Problem summary

  • No additional information is available.
    

Problem conclusion

  • A fix is available for IBM BPM V8.5.6.2 that optimizes group
    membership checks  for authorization decisions by restricting
    group membership lookups to the groups that are relevant in a
    specific context.
    
    Complete the following steps:
    
    1. Download and install IBM BPM V8.5.6 cumulative fix 2 from
      "Version 8.5.6.0 Cumulative Fix 2 for the IBM Business Process
      Manager products"
      (http://www.ibm.com/support/docview.wss?uid=swg24041303).
    
    2. Go to Fix Central (http://www.ibm.com/support/fixcentral) and
      search for JR54329:
      a. Select IBM Business Process Manager with your edition from
        the product selector, the installed version to the fix pack
        level, and your platform, and then click Continue.
      b. Select APAR or SPR, enter JR54329, and click Continue.
      c. Install JR54329.
    
    When you download fix packages, ensure that you also download
    the readme file for each fix. Review each readme file for
    additional installation instructions and information about the
    fix.
    
    3.  Enable the new behavior by adding the following setting to
      the 100Custom.xml files in Process Server and Process Center:
    
    <common merge="mergeChildren">
      <security merge="mergeChildren">
        <optimize-group-membership-lookups merge="replace">true
        </optimize-group-membership-lookups>
      </security>
    </common>
    
    Use this setting when users are members in many groups. When
    that many large groups (with many thousand users as members) are
    in use, perform tests after you apply this setting.
    

Temporary fix

Comments

APAR Information

  • APAR number

    JR54329

  • Reported component name

    BPM STANDARD

  • Reported component ID

    5725C9500

  • Reported release

    856

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2015-09-18

  • Closed date

    2016-06-24

  • Last modified date

    2016-06-24

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    BPM STANDARD

  • Fixed component ID

    5725C9500

Applicable component levels

  • R856 PSY

       UP



Document information

More support for: IBM Business Process Manager Standard

Software version: 856

Reference #: JR54329

Modified date: 24 June 2016