Approvals using PublicData_ form variables auto-approve by System in RSA Identity Governance & Lifecycle
2 years ago
Originally Published: 2021-02-04
Article Number
000045124
Applies To
RSA Product Set: RSA Identity Governance & Lifecycle
RSA Product/Service Type: Appliance
RSA Version/Condition: 7.2.x
Issue
After upgrading to version 7.2.x or higher, approvals using form public variables for resource assignment are not getting a user assigned and are auto-approving by the system.  
Cause
Public workflow variables such as those coming from a custom form used to be available in approval and fulfillment workflows as job variables for resource assignment.  In versions 7.2 and up they are no longer copied up and down the job hierarchy in order to save space on table WP_USER_DATA.
Resolution
Remove the Job scope and change it to Public and then remove the variable prefix PublicData_.

The following query may be useful for finding the workflows and nodes that need to be changed:
select p.name as Workflow, pn.name as Node, ud.var_name, ud.var_cvalue
from avuser.wp_user_data ud
inner join avuser.wp_proc p on p.proc_id = ud.proc_id
inner join avuser.wp_proc_node pn on pn.proc_id = p.proc_id and ud.data_id = pn.proc_node_id
where upper(ud.var_cvalue) like '%PUBLICDATA_%' and ud.var_name='acm.resource.include';