PJ46240: CONTENT MANAGER ON DEMAND (CMOD) DOCUMENTS ARE ADDED TO A CASE BY ONE USER CAN'T BE OPENED BY OTHER CMOD USERS

Direct links to fixes

APAR status

Closed as program error.

Error description

You can't open Content Manager on Demand (CMOD) documents
attached to a case by a different CMOD user.

PRODUCTS AFFECTED
IBM Business Automation Workflow
IBM Case Manager

Local fix

Problem summary

In V9.5.0.3, CMOD changed the identifier for a document from
unencrypted to encrypted as a security fix. The newly encrypted
identifier is encrypted based on each user session and,
therefore, the encrypted identifier works only for the user who
accessed the document. In Case Manager, this means that only the
 user who added the document to the Case can access or open the
document.

Problem conclusion

A fix is available or will be available that uses a separate
document identifier in the external CMOD document reference so
that all users can access a document. However, because of the
document identifier changes in CMOD,

    Existing CMOD documents that were added to a case as a
reference that uses the encrypted user session identifier can be
opened only by the CMOD user who originally added the document
to the case.
    To allow other users access to CMOD documents on a case,
Case Manager users must re-add the CMOD document as a reference
to the case. The new reference uses the CMOD document identifier
that doesn't have user-session restrictions.  A user would need
to re-add the document reference for
        any CMOD documents that were added before APAR PJ46240
was installed
        any CMOD documents that were added when the CMOD and IBM
Content Manager OnDemand Web Enablement Kit (ODWEK) version is
V9.5.0.3 or later
    If you don't want the new behavior introduced with APAR
PJ46240, you can configure CMOD document references to use the
session encrypted identifier, meaning only the user who added
the CMOD document reference to the case can access and open the
document. Select "Set external Content Manager OnDemand (CMOD)
document references to use session-specific encrypted
references" in the Case Manager Client plug-in configuration.

If CMOD is V9.5.0.3 or earlier, the document identifiers are
unencrypted; therefore, you can choose from the following
options:

    Stay on the existing CMOD version, which will continue to
allow unencrypted identifier to work and all users can access a
document based on the unencrypted identifier.
    Upgrade to a newer CMOD and ODWEK version and add a flag to
allow old unencrypted identifiers to work with the newer CMOD
libraries. To allow ODWEK to support accepting the previous
unencrypted document identifier, specify
ARS_SUPPORT_OLD_ODWEK_DOCIDS=1 in the ars.cfg configuration file
for the OnDemand Server. For more information, see "IBM Content
Manager OnDemand V9.5.0.3 readme files"
(https://www.ibm.com/support/pages/ibm-content-manager-ondemand-
v9503-readme-files).

Temporary fix

Comments

APAR Information

APAR number
PJ46240
Reported component name
CASE MGR CLIENT
Reported component ID
5725A1501
Reported release
533
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2020-07-15
Closed date
2020-09-22
Last modified date
2020-09-22

APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:

Fix information

Fixed component name
CASE MGR CLIENT
Fixed component ID
5725A1501

Applicable component levels

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSCTJ4","label":"Case Manager"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"533","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
12 September 2023

Tips

PJ46240: CONTENT MANAGER ON DEMAND (CMOD) DOCUMENTS ARE ADDED TO A CASE BY ONE USER CAN'T BE OPENED BY OTHER CMOD USERS

Direct links to fixes

Subscribe

APAR status

Closed as program error.

Error description

Local fix

Problem summary

Problem conclusion

Temporary fix

Comments

APAR Information

APAR number

Reported component name

Reported component ID

Reported release

Status

PE

HIPER

Special Attention

Submitted date

Closed date

Last modified date

APAR is sysrouted FROM one or more of the following:

APAR is sysrouted TO one or more of the following:

Fix information

Fixed component name

Fixed component ID

Applicable component levels

Document Information

Share your feedback

Need support?