PM73533: UNABLE TO MAP SECURITY ROLE TO THE USER FOR SERVICE REGISTRY

8.5.0.2: WebSphere Application Server V8.5 Fix Pack 2
8.0.0.6: WebSphere Application Server V8.0 Fix Pack 6
8.0.0.7: WebSphere Application Server V8.0 Fix Pack 7
8.0.0.8: WebSphere Application Server V8.0 Fix Pack 8
8.0.0.9: WebSphere Application Server V8.0 Fix Pack 9
8.0.0.10: WebSphere Application Server V8.0 Fix Pack 10
8.0.0.11: WebSphere Application Server V8.0 Fix Pack 11
8.0.0.12: WebSphere Application Server V8.0 Fix Pack 12
8.0.0.13: WebSphere Application Server V8.0 Fix Pack 13
8.0.0.14: WebSphere Application Server V8.0 Fix Pack 14
8.0.0.15: WebSphere Application Server V8.0 Fix Pack 15

APAR status

• Closed as program error.

Error description

• The below error is generated when mapping a security role to the
  user:
  
  Error The <userID> user cannot be deleted from the
  Administrator role because the RunAsRole contains the same
  user. Delete the user from the RunAsRole first and then remove
  this user.
  

Local fix

• N/A
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM WebSphere Application      *
  *                  Server                                      *
  ****************************************************************
  * PROBLEM DESCRIPTION: Unable to map a security role to a      *
  *                      user due to a failure of user id        *
  *                      matching.                               *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  Due to code defect, the security code always performs case
  sensitive string search while validating an input value for
  role mapping. As a result, when access ID of role mapping in
  an application bind file and a user or group access ID have a
  case mismatch, the security code fails to treat the input
  string as a valid value.
  

Problem conclusion

• With this fix, string comparison is performed based on the
  setting of ignore case flag.
  
  The fix for this APAR is currently targeted for inclusion in
  fix pack 8.0.0.6, and 8.5.0.2.  Please refer to the Recommended
  Updates page for delivery information:
  http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBS APP SERV N

• Fixed component ID

  5724H8800

Applicable component levels

• R800 PSY

     UP

• R850 PSY

     UP