JR62383: RUNNING A HUMAN SERVICE EXPOSED AS A URL BY USING NAME-BASED PARAMETERS DOESN'T TRIGGER GROUP MEMBERSHIP SYNCHRONIZATION

workflow.20002.delta.repository

APAR status

• Closed as program error.

Error description

• When you try to start a human service that is exposed as a URL,
  the group membership synchronization is not invoked.
  
  If you have never accessed IBM Business Automation Workflow
  before or have recently been added to a group with authorization
  to run the client-side human service, you might not be
  recognized as authorized to launch the client-side human service
  from a URL.
  
  Consequently, you receive the following error message:
  
  "You are not allowed to execute this item for one of the
  following reasons:
  1. The service is not exposed.
  2. The snapshot is not active.
  3. You do not have permission to run the service."
  
  PRODUCTS AFFECTED
  IBM Business Automation Workflow
  

Local fix

• Use ID-based parameters to call a client-side human service from
   an exposed URL.
  

Problem summary

• When client-side human services that have name-based parameters
  in the URL are deployed to IBM Workflow Server, a
  pre-authorization check is performed without first synchronizing
   group membership.
  

Problem conclusion

• A fix is available or will be available that ensures the group
  membership for a user is synchronized when a client-side human
  service is accessed from an exposed URL.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  BUS AUTO WORKFL

• Fixed component ID

  5737H4100

Applicable component levels