LI80617: "MY ORGANIZATION" IS NOT ACCESSIBLE AFTER AN UNSUCCESSFUL ATTEMPT TO DELETE A CONSUMER ORG USER USING THE TOOLKIT

IBM_API_Connect_ICP_Professional_2018.4.1.4
IBM_API_Connect_ICP_Enterprise_2018.4.1.4

APAR status

• Closed as program error.

Error description

• Using the API Connect 4.1.0 CLI toolkit, when you try to delete
  an user account from the developer portal by executing toolkit
  command:
  apic users:delete -s $SERVER -o $ORG
  --user-registry=$USER_REGISTRY
  Afterward, an error message prompt saying that the user could
  not be deleted.
  The user is still able login on the Portal but when you access
  the "My Organization" it fails with message:
  Oops. Looks like you don't have access to the Portal.
  (https://portal-hostname/org-name/cat-name/ibm_apim/nopermission
  /ibm_apim/nopermission)
  - Reproduction steps
  -----------------------
  1- Create an user in the Developer Portal
  2- Use the toolkit to try to delete the user:
  apic users:delete -s $SERVER -o $ORG
  --user-registry=$USER_REGISTRY
  Result-> this fails with the message 'An error message prompt
  saying that the user could not be deleted.
  3- Login to the Developer Portal with the same user:
  Result-> The login succeeded
  4- Go to the "My Organization" page
  Result: -> ops. Looks like you don't have access to the Portal.
  

Local fix

• After the deletion failure of the user from the toolkit, the
  'my organization' page is not accessible anymore.
  -> Workaround: Run the command 'site_content_refresh -f uuid"
  from the portal portal pod
  This will resolve the permission issue when you try to access
  the "My organization|" page.
  

Problem summary

• The portal and gateway are getting bad data from webhook when
  the data is rolling back in apim side. It causes ghost object on
  the subscriber.
  

Problem conclusion

• Issue fixed in API Connect v2018.4.1.4
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  API CONNECT ENT

• Fixed component ID

  5725Z2201

Applicable component levels