Form element control type "Drop Down Select with Web Service" displays validation exception as a value in RSA Identity Governance & Lifecycle
2 years ago
Originally Published: 2019-10-09
Article Number
000042482
Applies To
RSA Product Set: Identity Governance & Lifecycle
RSA Version/Condition: 7.0.2, 7.1.0, 7.1.1

 
Issue
In RSA Identity Governance & Lifecycle, when defining a form element to be of control type Drop Down Select with Web Service and an invalid URI from which to get options is specified, the exception or error message is displayed as a value of the form field rather than an error message. This allows the user to proceed with creating a change request when they should be prevented due to the validation error. In the user interface, go to Requests > Configuration > Request Forms tab > {form name} > Fields.

The example below illustrates this issue. 
 
Form defined with a field of type Drop Down Select with Web Service.
 
User-added image
User-added image

Run the form and note the error is displayed as a value rather than an error message.
 
java.net.MalformedURLException:no protocol:localhost/aveksa/123.jsp
 
User-added image

The consequence of this incorrect behavior is that it allows the user to ignore the validation error and continue with creating the change request.
 
User-added image
Cause
This is a known issue reported in engineering ticket ACM-96978.
Resolution
This issue is resolved in the following RSA Identity Governance & Lifecycle versions and/or patch levels:
  • RSA Identity Governance & Lifecycle 7.0.2 P15
  • RSA Identity Governance & Lifecycle 7.1.0 P08
  • RSA Identity Governance & Lifecycle 7.1.1 P03
  • RSA Identity Governance & Lifecycle 7.2
Please see related RSA Knowledge Base Article 000038040 -- Unable to load form fields when using a form element of control type "Drop Down with Web Service" in RSA Identity Governance & Lifecycle 7.1.1 P02  for a defect introduced in 7.1.1 P02 when the validation URI is valid.