Fix (APAR):  JR32650

Status:  Fix

Release:  6.2.0.1

Operating System:  AIX,HP-UX,i5/OS,Linux,Solaris,Windows

Supersedes Fixes:  

CMVC Defect:  xxxxxx

Byte size of APAR:  12673

Date: 2009-04-24

Abstract:  Exception occurs when the business proc ess container uses a business calendar when Java 2 security is enabled.

Description/symptom of problem:  
JR32650 resolves the following problem:

ERROR DESCRIPTION:                                              
When business processes and human tasks are using business      
calendars and Java2 security is enabled on the server and there 
is a change that is made to the business calendar, a            
java.security.AccessControlException: Access denied             
(javax.security.auth.AuthPermission wssecurity.getRunAsSubject) 
will be thrown.                                                 

LOCAL FIX:                                                      
No Workaround available besides turning off Java2 security      

PROBLEM SUMMARY

USERS AFFECTED:
WebSphere Process Server and WebSphere ESB
v6.2.0.1 users using business processes or
human tasks with business calendar and
Java 2 security enabled.

PROBLEM DESCRIPTION:
Exception occurs when the business proc
ess container uses a business calendar
when Java 2 security is enabled.

RECOMMENDATION:
None

The call to get the current user for repository access for
business calendars used by business processes and human tasks
did not have the correct privileges.

PROBLEM CONCLUSION:                                             
The appropriate privilege check was added to allow for the      
current user to be retrieved by the from the security context.  
Apply iFix to resolve the problem.                              


Directions to apply fix:  
Download and follow Update Installer installation instructions.  The Update Installer can be downloaded from the following link:
http://www.ibm.com/support/docview.wss?rs=180&uid=swg21205991

1) Copy the pak file to the directory maintenance in the UpdateInstaller directory

2) Shutdown WebSphere Process Server. It is important that you perform a controlled and complete shutdown of the server to ensure that all transactions have completed, before installing the fix.

3) Run the UpdateInstaller and follow the prompts.

4) Restart WebSphere Process Server.

Directions to remove fix:  
NOTE:  FIXES MUST BE REMOVED IN THE REVERSE ORDER IN WHICH THEY WERE APPLIED.  DO NOT REMOVE A FIX UNLESS  ALL FIXES APPLIED AFTER IT HAVE FIRST BEEN REMOVED.  YOU MAY REAPPLY ANY REMOVED FIX.

Example:  If your system has fix1, fix2, and fix3 applied in that order and fix2 is to be removed, fix3 must be removed first, then fix2 may be removed

1) Shutdown WebSphere Process Server. It is important that you perform a controlled and complete shutdown of the server to ensure that all transactions have completed, before installing the fix.

2) Follow the Fix instructions that are packaged with the Fix Installer on how to uninstall and reinstall the Fix.

3) Restart WebSphere Process Server.

Directions to re-apply fix:  
1) Shutdown WebSphere. It is important that you perform a controlled and complete shutdown of the server to ensure that all transactions have completed, before installing the fix.

2) Run the UpdateInstaller and follow the instructions. The Update Installer can be downloaded from the following link:
http://www.ibm.com/support/docview.wss?rs=180&uid=swg21205991

3) Restart WebSphere Process Server.

Additional Information: