Tuesday, 8 April 2014

IBM Business Monitor - Unable to delete BusinessSpaces

One of my clients hit an interesting issue with IBM Business Monitor, that'd likely affect any product using BusinessSpace, including Business Process Manager.

This was a newly minted environment, and we were quite able to create Business Spaces, but we were unable to delete them.

There were no obvious exceptions in the WAS logs or in the underlying Oracle database.

It was a bit of a puzzler.

At my suggestion, the client raised a PMR with IBM Support, which came up trumps.

The client mentioned to IBM Support that they're using IBM Tivoli Access Manager for e-Business ( aka WebSEAL ) as a secure reverse proxy in front of IBM Business Monitor.

WebSEAL proved to be the villain of the piece, but that's actually a good thing.

By default, the permissions (ACL) set on the WebSEAL junction fronting Monitor ( aka BAM ) didn't allow the Delete and Modify actions; as one can imagine, deleting a BusinessSpace definitely counts as a Delete action.

The WebSEAL team added the 'd' (delete) and 'm' (modify) permissions to the Access Control List in WebSEAL.

Once done, deletes worked like a dream :-)

No comments: