Approvals using PublicData_ form variables auto-approve by System in RSA Identity Governance & Lifecycle

Originally Published: 2021-02-04

Last Modified: 2023-10-06

Article Number

000045124

Applies To

RSA Product Set: RSA Identity Governance & Lifecycle
RSA Product/Service Type: Appliance
RSA Version/Condition: 7.2.x

Issue

After upgrading to version 7.2.x or higher, approvals using form public variables for resource assignment are not getting a user assigned and are auto-approving by the system.

Cause

Public workflow variables such as those coming from a custom form used to be available in approval and fulfillment workflows as job variables for resource assignment. In versions 7.2 and up they are no longer copied up and down the job hierarchy in order to save space on table WP_USER_DATA.

Resolution

Remove the Job scope and change it to Public and then remove the variable prefix PublicData_.

The following query may be useful for finding the workflows and nodes that need to be changed:

select p.name as Workflow, pn.name as Node, ud.var_name, ud.var_cvalue
from avuser.wp_user_data ud
inner join avuser.wp_proc p on p.proc_id = ud.proc_id
inner join avuser.wp_proc_node pn on pn.proc_id = p.proc_id and ud.data_id = pn.proc_node_id
where upper(ud.var_cvalue) like '%PUBLICDATA_%' and ud.var_name='acm.resource.include';

Don't see what you're looking for?

Salesforce MFA Enforcement – Action Required

Related Articles

Trending Articles