IT42683: MULTIPLE USERS RECEIVES THE HATS MESSAGE HATS1005 WHEN ACCESSING THE HOST SYSTEM (IBM I V7R3)

APAR status

• Closed as program error.

Error description

• We have verified that when CSRF was enabled, there is a
  possibility one of the pages goes missing which is suppose to be
  included with the CSRF token. The error may occur when request
  is sent to the server without the token.
  

Local fix

• None. Permanent solution will be included n the next fix pack.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * HATS Users                                                   *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * User gets HATS 1004 error message when multiple users access *
  * the application after enabling token-based protection.       *
  * Affected Module are hatsruntime.jar and hatscommon.jar       *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  1. Create a HATS web project.
  2. Enable token-based protection under Project settings -> Other
  -> Client settings
  3. Access the application with multiple users at the same time.
  4. HATS 1004 token mismatch error message will be shown.
  

Problem conclusion

• Code changes has been made to address the token mismatch issue.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  RATL HATS FOR 5

• Fixed component ID

  5724U6800

Applicable component levels