IJ35145: USERS CAN CHANGE THE STATUS OF A WORK ORDER EVEN IF THE USER DOES NOT HAVE PRIVILEGES TO CHANGE THE STATUS OF A WORKORDER

APAR status

• Closed as program error.

Error description

• PROBLEM: Users can change the status of a work order even if
  the user does not have privileges to change the status of a
  workorder in the Graphical Scheduling application.
  
  STEPS TO REPLICATE:
  1. Go to the Security Group application.
  Open a security group (TESTGRP).
  This security group does not have privileges to change a
  workorder's status.
  2. Go to User application.
  User (TSCH1) belongs to TESTGRP group.
  3. Log into Maximo using the TSCH1 user.
  4. Go to Work Order Tracking application.
  Open a work order (TESTWO). The user cannot change the status.
  5. Go to Graphical Scheduling application.
  Create a schedule (TESTSCH).
  Set where clause: WONUM = 'TESTWO'.
  Save.
  6. Go to the Graphical View Tab.
  7. Right Click for Work Order (TESTWO) - Click Change Status.
  
  RESULTS: User can change the status even if user does not have
  privileges to change a work order's status.
  EXPECTED RESULT: User should not be able to change the status
  of the work order.
  
  REPORTED IN VERSION: Maximo Asset Management 7.6.1.2.
  IBM Maximo Asset Management Scheduler 7.6.8.
  
  AFFECTED APPLICATION (for Maximo Only): Graphical Scheduling
  application.
  NB: Any custom single page applications using the WORKORDER
  main object will not have the 'STATUS' sigoption.
  
  INDUSTRY SOLUTION/ADD ON (if applicable): N/A
  

Local fix

• N/A
  

Problem summary

Problem conclusion

• The fix for this APAR is contained in the following maintenance
  package: | Release 7.6.1.3 of Base Services
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  MAXIMO ASST MGM

• Fixed component ID

  5724R46AM

Applicable component levels