IBM Support

PH13303: ACCESS DENIED IN LOGS WHEN CALLING LIBERTYADVISORSUMMARYSERVLET EVEN WHEN USER HAS REQUIRED ROLES

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

APAR status

  • Closed as program error.

Error description

  • Users get an 'Access denied' exception when trying to
    interact with Liberty Advisor Summary column in the console,
    even if they have the appropriate user role. When the exception
    occurs Liberty Advisor Summary column doesn't populate.
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED:  All users of IBM WebSphere Application      *
    *                  Server who navigate to the application      *
    *                  collections page of the administrative      *
    *                  console.                                    *
    ****************************************************************
    * PROBLEM DESCRIPTION: An 'Access denied' error is logged      *
    *                      when the Liberty Advisor Summary        *
    *                      column is populated regardless of       *
    *                      user role.                              *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    In the application collections page, a user
    will get an 'Access denied' error in the logs when trying to
    interact with Liberty Advisor Summary column in the console
    even if they have the appropriate user role. No error shows up
    in the administrative console, but the Liberty Advisor Summary
    column doesn't populate.
    

Problem conclusion

  • The authentication specification for the servlet and admin
    command that are called to populate the Liberty Advisor
    Summary column were modify to prevent this issue.
    
    The fix for this APAR is currently targeted for inclusion in
    fix pack 8.5.5.16 and 9.0.5.1.  Please refer to the
    Recommended Updates page for delivery information:
    http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
    

Temporary fix

Comments

APAR Information

  • APAR number

    PH13303

  • Reported component name

    WEBS APP SERV N

  • Reported component ID

    5724H8800

  • Reported release

    850

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2019-06-13

  • Closed date

    2019-08-23

  • Last modified date

    2019-08-23

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    WEBS APP SERV N

  • Fixed component ID

    5724H8800

Applicable component levels



Document information

More support for: WebSphere Application Server
General

Software version: 850

Reference #: PH13303

Modified date: 23 August 2019