Fixed Issues in 7.1 Patch 9

[#1]

The following issues were fixed in RSA Identity Governance and Lifecycle version 7.1 Patch 9.

Access Certification

Issue	Description
SF-1415644 ACM-99914	Escalation workflows erroneously allowed the assignment of reviews to deleted supervisors.
SF-1395553 ACM-98860	In an environment using AFX, when deleting review results that had the "Delete pending change requests" option selected, the "ORA-02292: integrity constraint violated" error occurred.

Access Requests

Issue	Description
SF-1332855 ACM-98331	AFX incorrectly indicated a failure after removing entitlements from deleted accounts in SAP.

Account Management

Issue

Description

SF-1373606 SF-1377093 ACM-99457 ACM-99353

Duplicate accounts were created when a pending account was created with the same name but different capitalization as another account in a case-insensitive ADC. The next time the accounts were collected for the case-insensitive ADC, the pending account’s name is updated to match the capitalization, which caused duplicate accounts in the system. The system will now take an ADC's case-sensitivity into consideration and result in an error when necessary.

AFX

Issue	Description
SF-1191999 ACM-93037	The Active Directory output parameter did not work when more than one output parameters were defined.
SF-1381197 ACM-98389	The AFX RESTful web service failed to process responses when the response body was empty.
SF-1300643 ACM-94655	On a request form, when a form field was mapped to a provisioning parameter that contained encrypted values, the form did not properly substitute the correct value when generating the request.
SF-1304327 SF-1395022 SF-1271598 SF-1353050 ACM-94413 ACM-92673	Hardened communication between AFX server and ActiveMQ JMX interface.
SF-873061 ACM-53444	AFX logs reported that headers were not being used in JMS Message-compliant way.

Authentication

Issue	Description
SF-1329501 ACM-95778	When multiple SSO User Headers authentication sources were configured, an authentication source was randomly picked without verifying the authentication source name during authentication.

Change Requests and Workflows

Issue	Description
SF-1396244 ACM-98904	When a change request workflow contained a decision that used the filter "Contains at least one violation", the change request did not go to the True transition when expected.
SF-1426513 ACM-100295	In a workflow that is configured to group by business source, password resets skipped the workflow and the change request workflow completed with the item still in Pending Action status.
SF-1414918 ACM-99719	Approval workflows randomly ran simultaneously in a change request.
SF-1405274 ACM-99718	When entitlements were grouped by category, auto-approve did not work as expected.
SF-1320224 ACM-95340	Unable to hide the attachments in change requests.

Collector

Issue	Description
SF-1437194 ACM-101006	An account collector had performance issues when searching for a cycle of groups in an environment with multiple ADCs when one ADC collected the majority of groups but the SQL explain plan was not appropriate for that collector.

Connector

Issue	Description
SF-1271097 ACM-92670	AFX connectors were unable to handle role membership changes, and displayed an error that the command was not supported on the endpoint.

Custom Attributes

Issue	Description
SF-1276541 ACM-92962	When editing an object on which a managed custom date attribute was previously set, the attribute field was blank.

Data Collection Processing and Management

Issue	Description
SF-1423086 ACM-100161	Unification failed with the “ORA-30926: unable to get a stable set of rows in the source tables” error when a IDC had join attributes change

Database Management/Performance

Issue	Description
SF-839629 SF-1129089 ACM-66800	Source data tables had Oracle logging disabled, resulting in potential Oracle data file corruption.
SF-1393271 ACM-98822	Unification cleanup for the User Mapping table took longer than expected due to the table containing excessive data.
SF-1403444 ACM-99867	When database purging exceeded the threshold of four hours, the process did not exit and complete as expected.
SF-1401651 ACM-99098	The system performed slowly after upgrading and using Oracle 12.2.

Metadata Import/Export

Issue	Description
SF-1408780 ACM-99393	All items on the metadata export screen were erroneously selected when browsing between pages.
SF-1395168 SF-1372664 ACM-98888 ACM-98502	When a customer added a custom user-type attribute named Technical Owner, Business Owner, or Exception Manager, an ORA-00904 error occurred during the creation of public views.
SF-1355771 SF-1436973 ACM-97215 ACM-101387	Deleted entitlements were referenced when importing a role definition.

Migration

Issue	Description
SF-1406053 ACM-101119	Upgrading to a patch failed due to increased security restrictions on the "DUAL" table when it was used by Views. RSA Identity Governance and Lifecycle has now deprecated the use of this table in views.

Platform

Issue	Description
SF-1313737 ACM-95186	The modifynetworksettings.sh script did not modify the /etc/hosts entry and instead added an additional line.

Reports

Issue	Description
SF-1381866 ACM-98674	System performance was affected by the report deletion process.
SF-1347793 ACM-97050	After specifying an equals filter for an application name, its alternate name was saved in the report XML while the underlying view contained the raw name. Because of this mismatch, the report did not generate results or load the filter properly when the report was reopened. This also occurred with other objects that had alternate names. The system now saves the raw name as expected to prevent this issue.

Request Forms

Issue	Description
SF-1402613 ACM-99476	Unable to attach files to forms using Internet Explorer 11.
SF-1402613 ACM-99474	Unable to attach files to forms if the filename contains spaces.
SF-1303005 ACM-95574	When localizing the language of request form elements, the prefixes for the localized properties files were not updated to the correct form type when the entire form type was updated.
SF-1442831 ACM-101157	When a JSP file was referenced in the Validation URI for a request form, an exception occurred.
SF-1401041 ACM-99601	Unable to create an out-of-office request when additional fields under Requests > Configuration > Submission were present but not enabled for display.

Rules

Issue	Description
SF-1345900 ACM-98473	When entitlements of different types had the same ID, suggested entitlements could include empty or invalid entitlements. The query has now been fixed to join on entitlement type as well as ID.
SF-1333143 ACM-95904	A provisioning/termination rule did not create change requests to revoke entitlements when there are accounts to disable and delete.

Security

Issue	Description
SF-1213280 ACM-98087	Improved security of X-Content-Type-Options headers in responses from RSA Identity Governance and Lifecycle.
SF-1213280 ACM-98085	Improved security surrounding the session token for requests to Identity Governance and Lifecycle.

User Interface

Issue	Description
SF-1409748 ACM-99458	Nested items in a drop-down menu were capped at a 25 character limit, causing button names in the dashboard to be truncated.
SF-1393826 ACM-98939	The reviewer interface did not display dates properly when the user interface was configured to use the Polish language.
SF-1330725 ACM-95798	Unable to resize SQL data query boxes in the collector configuration screen.
SF-1274803 ACM-99479	A request error occurred after clicking the History tab for any rule.
SF-1408780 ACM-99270	When account summary table data was saved in CSV format, the data was exported along with HTML tags from the exported table.
SF-1042334 SF-1210846 ACM-79532	After specifying a sequence of attributes under Admin > Attributes, saving the sequence, and then editing any attribute, the sequence no longer displayed correctly.
SF-1378946 ACM-98990	When “customerstrings” was used to modify the value for change request custom attributes, the value disappeared from the change requests UI table.
SF-1446680 SF-1452414 ACM-101222 ACM-101428	When viewing User > Requests or collection run details from the Collector History tab of a specific collector, the displayed breadcrumbs were incorrect.
ACM-95187	The search option for tables did not work if the string began with the special character #.
SF-1402236 ACM-99526	When adding entitlements to a role, if the “one of” filter was used, the ORA-00904: “ENTITLEMENT_NAME”: invalid identifier error occurred.

Web Services

Issue	Description
SF-1402236 ACM-99526	When adding entitlements to a role, if the “one of” filter was used, the ORA-00904: “ENTITLEMENT_NAME”: invalid identifier error occurred.