IT35106: STORAGE INSIGHTS "ADMIN" ROLE DOESN'T TAKE PRECEDENCE OVER THE "SUPPORT" ROLE

APAR status

• Closed as program error.

Error description

• If a user is assigned the Admin role in Storage Insights, the
  permissions and views associated with the Admin role should
  display regardless of whether or not this user's ID also has
  the "support" role. In the current design there's a problem
  with the cached authorization data, and the only current way
  to address this is a recycle of the web server process.
  
  ____________________________________________________
  The defect is against component:
  5608TPCSI
  
  Server/Manager
  build/release: 5.4.1
  
  Problem as described by customer:
  IBM Hardware Support agents who are later granted Admin
  permissions to Storage Insights instances still only see the
  views that are attributed to the Support role.
  
  Initial customer impact
  (low/med/high): med
  

Local fix

• DevOps/Support can recycle the web server process, internally
  to the Storage Insights instance, to correct this.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * IBM Storage Insights users assigned the Admin and Support    *
  * role                                                         *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * If a user is assigned the Admin role in Storage Insights,    *
  * the                                                          *
  * permissions and views associated with the Admin role should  *
  * display regardless of whether or not this user's ID also has *
  * the "support" role. In the current design there's a problem  *
  * with the cached authorization data, and the only current way *
  * to address this is a recycle of the web server process.      *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  

Problem conclusion

• The fix for this APAR is targeted for the following release:
  
  IBM Storage Insights 1Q21 [ 5.4.1-IBM-SI-Patch ]
  IBM Storage Insights 1Q21   [ 54X-IBM-SI ]
  
  The target dates for future releases do not represent a formal
  commitment by IBM. The dates are subject to change without
  notice.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  STORAGE INSIGHT

• Fixed component ID

  5608TPCSI

Applicable component levels