Problem Note 63851: SAS® Life Science Analytics Framework API 1.8.1 - Error occurs when individual member added to project permission area and API user lacks privilege
 |  |  |  |
When using the SAS® Life Science Analytics Framework Java API method getAcl to acquire ACLs for an item, an error occurs if the user account running the API method does not have at least one of the user privileges "View List of User Accounts", "Manage User Accounts" or "Manage User Account General Information" granted and there is a user added to the permissions area of a project.
The error is the result of the Java API calling getUser for the user ACL when the Java API should be calling getUserDescriptor; the getUser call requires elevated privileges, specifically at least one of the user privileges "View List of User Accounts", "Manage User Accounts" or "Manage User Account General Information" whereas the getUserDescriptor call does not.
A fix has been introduced to ensure the appropriate call is made.
Note the behavior and fix also affects the lsaf_getacls macro within the SAS® Life Science Analytics Framework Macro API.
Operating System and Release Information
| Product Family | Product | System | Product Release | SAS Release | ||
| Reported | Fixed* | Reported | Fixed* | |||
| SAS System | SAS Life Science Analytics Framework | Linux for x64 | 4.7.1 | 4.7.3 | 9.4 TS1M3 | 9.4 TS1M3 |
| Type: | Problem Note |
| Priority: | high |
| Date Modified: | 2019-04-11 10:20:42 |
| Date Created: | 2019-03-14 15:13:05 |