Error "Expression is too complex for simple mode" when trying to edit the WHERE clause of a membership rule for a Role in RSA Via Lifecycle and Governance

[#1]

Article Number

000033465

Applies To

RSA Product Set: RSA Via Lifecycle and Governance (RSA Via L&G)
RSA Version/Condition: 6.9.1 P14, 7.0 P03, 7.0.1 

 

Issue

When attempting to edit the WHERE clause of a Membership Rule for a Role in RSA Via Lifecycle and Governance the error message is displayed and the SQL statement cannot be saved:

Expression is too complex for simple mode.

Image description
 

Cause

This issue was introduced in RSA Via Lifecycle and Governance in the following patches/versions:

• Patch P14 for RSA Identity Management and Governance version 6.9.1
• Patch P03 for RSA Via Lifecycle and Governance 7.0
• GA version of RSA Via Lifecycle and Governance 7.0.1

The editor incorrectly attempts to parse advanced SQL statements used in the WHERE clause of a membership rule as if they were simple queries.  The failure prevents the user from creating and saving complex SQL.  The failure may occur either when creating a new SQL statement or attempting to edit any part of an existing SQL statement.

Resolution

This issue is resolved in:

• Patch P16 for RSA Via Lifecycle and Governance 6.9.1.  
• Patch P04 for RSA Via Lifecycle and Governance 7.0.
• Patch P01 for RSA Via Lifecycle and Governance 7.0.1.

Download patches for RSA Via Lifecycle and Governance here.

Workaround

The issue does not occur for simple queries, or advanced queries that only contain a single SQL element.  Try and simplify the SQL so that it does not use SQL OR or AND in the statement.

The issue only prevents editing and saving the SQL statement.  Existing complex SQL statements are still valid as long as they are not edited. Avoid making edits to membership rules, or edit the rules in an earlier (or later) patch level of RSA Via Lifecycle and Governance and use the Import/Export function to import a working rule into the problem version.