PM77261: USER WITH MONITOR ROLE RECEIVED ' NULL ' MESSAGE WHEN ACCESSING BUNDLE CACHE ON THE ADMINISTRATIVE CONSOLE

8.5.0.2: WebSphere Application Server V8.5 Fix Pack 2
8.0.0.6: WebSphere Application Server V8.0 Fix Pack 6
8.0.0.7: WebSphere Application Server V8.0 Fix Pack 7
8.0.0.8: WebSphere Application Server V8.0 Fix Pack 8
8.0.0.9: WebSphere Application Server V8.0 Fix Pack 9
8.0.0.10: WebSphere Application Server V8.0 Fix Pack 10
8.0.0.11: WebSphere Application Server V8.0 Fix Pack 11
8.0.0.12: WebSphere Application Server V8.0 Fix Pack 12
8.0.0.13: WebSphere Application Server V8.0 Fix Pack 13
8.0.0.14: WebSphere Application Server V8.0 Fix Pack 14
8.0.0.15: WebSphere Application Server V8.0 Fix Pack 15

APAR status

• Closed as program error.

Error description

• When client logs into the WebSphere Administrative console
  with a user with the Monitor role and navigates to the
  following path, a null message is returned:
  
  Environment > OSGi bundle repositories > Bundle cache
  
  At this panel, the user with Monitor role receives 'Null'
  message in the AdminConsole.
  
  However, users with WebSphere Operator and / or Administrator
  role assignments are able to access the WSAS bundle cache
  using the Admin Console.
  
  SystemOut.log contains the following error:
  -------------------------------------------
  00000024 RoleBasedAuth A   SECJ0305I:
  The role-based authorization check failed for admin-authz
  operation BundleCacheManager:getAllBundles. The user monitor
  (unique ID:
  user:defaultwimfilebasedrealm/uid=monitor,o=defaultwimfilebasedr
  ealm) was not granted any of the following required roles:
  operator, administrator.
  
  Environment:
  -----------
  WebSphere Application Server version: 8.0.0.4
  

Local fix

• User can log on to the admin console as 'operator' or
  'administrator' user role to access the Bundle Cache.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM WebSphere Application      *
  *                  Server who enable administrative security   *
  *                  and use OSGi applications                   *
  ****************************************************************
  * PROBLEM DESCRIPTION: Permissions not granted to monitor      *
  *                      role users in administration console.   *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  Administration console users with the security role of monitor
  were not granted access to MBean methods required to view the
  OSGi bundle repositories page.
  

Problem conclusion

• The required authorities have been granted to monitor users.
  
  The fix for this APAR is currently targeted for inclusion in
  fix pack 8.0.0.6 and fix pack 8.5.0.2.  Please refer to the
  Recommended Updates
  page for delivery information:
  http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBS APP SERV N

• Fixed component ID

  5724H8800

Applicable component levels

• R800 PSY

     UP

• R850 PSY

     UP