IBM Support

Cannot create attached document when there is a data restriction on SYNONYMDOMAIN object

Troubleshooting


Problem

You might face an issue scenario where you cannot create new file attachments (Doclinks) when there is a data restriction on SYNONYMDOMAIN object and the following symptoms would be observed on it:

* The "Select File" button disappears and you cannot create a new File Attachment.
* The "Copy document to the default location set by your administrator (recommended)?"  becomes read-only and you cannot create a new File Attachment.
* Removing the Data Restriction will enable this functionality back again.
You find it confusing because it doesn't really make sense for a synonymdomain restriction to be causing a seemingly unrelated issue like this.
 

Symptom

In a MAS Manage environment, go to Conditional Expression Manager app and create a condition like this one:
Condition = BOB1015
Expression =   domainid='LOCASSETSTATUS' and value in ('ABANDONED','BROKEN','CANCELLED','DECOMMISSIONED','MISSING','REMOVED','SEALED','IMPORTED','NOT READY','PROPOSED','OOS','APPROVED','EXISTING','LIMITEDUSE','OPERATING','UNDETERMINED')
Always Reevaluate?  = True (checked)
Go to Security Groups app and select the MAXADMIN security group

In the Data Restrictions tab, Object Restrictions subtab, add the following restriction
Object = SYNONYMDOMAIN
Application = ASSET
Type= QUALIFIED
Condition = BOB1015
Save Changes
Log out, Log back in as Maxadmin
Go to Assets application and open any asset record
Go to Attachments / Add new Attachments / Add new File.

* The "Select File" button has now disappeared and you cannot create a new File Attachment.
* The "Copy document to the default location set by your administrator (recommended)?"  becomes read-only
You cannot create a new File Attachment.
image-20240430134633-1

Resolving The Problem

The root cause here is that file attachment also depends on using the synonym domain condition. This is by design and may not be able to be easily changed.  The conditional expression being appended to (ANDed with) the expression used to query for doclinks information.

So, this query, which is done by internal code to allow file attachment to function....

select * from synonymdomain where ((value= 'FILE' ) and (domainid = 'URLTYPE' ))

... now becomes this (where the bold part is the customer's condition)...

select * from synonymdomain where ((value= 'FILE' ) and (domainid = 'URLTYPE' )) and ((domainid='LOCASSETSTATUS' and value in ('FILE','ABANDONED','BROKEN','CANCELLED','DECOMMISSIONED','MISSING','REMOVED','SEALED','IMPORTED','NOT READY','PROPOSED','OOS','APPROVED','EXISTING','LIMITEDUSE','OPERATING','UNDETERMINED')))

ANDing both of those clauses together causes no results to be returned when the attachments code is looking for it's domain.

The issue is resolved if we incorporate the attachment-specific pieces of the condition into the condition.

So, the condition would look like this (changes are in bold):

(domainid='LOCASSETSTATUS' or domainid = 'URLTYPE') and value in ('FILE','ABANDONED','BROKEN','CANCELLED','DECOMMISSIONED','MISSING','REMOVED','SEALED','IMPORTED','NOT READY','PROPOSED','OOS','APPROVED','EXISTING','LIMITEDUSE','OPERATING','UNDETERMINED')

Once you incorporate the attachment-specific pieces of the condition the issue will be solved.

Document Location

Worldwide

[{"Type":"MASTER","Line of Business":{"code":"LOB59","label":"Sustainability Software"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSRHPA","label":"IBM Maximo Application Suite"},"ARM Category":[{"code":"a8m50000000CbMTAA0","label":"System Administration-\u003EDoclinks"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"8.0.0;and future releases"}]

Document Information

Modified date:
30 April 2024

UID

ibm17149871

Page Feedback