IJ05009: ITM USER ASSIGNED TO *OPERATOR USER GROUP WITHOUT "VIEW" PERMISSION CANNOT ACCESS TEP WORKSPACE

IBM Tivoli Monitoring 6.3.0 Fix Pack 7 Service Pack 8 (6.3.0.7-TIV-ITM-SP0008)

APAR status

• Closed as program error.

Error description

• An ITM user assigned to the *OPERATOR user group without "View"
  permission associated with the "User Administration" authority
  cannot access TEP workspace data. This regression was
  introduced in ITM 630FP7 by APAR IV77992; previous ITM releases
  behave correctly. A partial fix of the regression was
  introduced into 6.3FP7 under defect 216831. However, that
  partial fix did not address the problem when the ITM user
  belongs to a user group; so the regression fix is incomplete.
  

Local fix

• Two workarounds have been identified:
  1. Make sure the ITM user has the "View" permission associated
  with the "User Administration" authority assigned.
  2. Remove the ITM user from any user group collection. This
  will then require that the user's permissions be managed
  independently from any user group.
  

Problem summary

• An ITM user assigned to the OPERATOR user group without "View"
  permission associated with the "User Administration" authority
  cannot access TEP workspace data.
  

Problem conclusion

• The TEPS has been updated to not require "View" permission
  associated with
  the "User Administration" authority in order to access TEP
  workspaces.
  
  
  The fix for this APAR is contained in the following maintenance
  packages:
  
     | service pack | 6.3.0.7-TIV-ITM-SP0008
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  TEPS

• Fixed component ID

  5724C04PS

Applicable component levels