65077 - SAS® Enterprise Case Management does not report an error when you attempt to attach a file with a blocked file extension

Problem Note 65077: SAS® Enterprise Case Management does not report an error when you attempt to attach a file with a blocked file extension

You can configure the SAS® Content Server to prevent users from uploading certain file extensions and MIME types to the SAS Content Server.

When you add an attachment in SAS Enterprise Case Management, you should not be able to attach a file with a type that is blocked through the SAS Content Server configuration. However, the web application might not report an error when you attempt to attach a file with a blocked file type. Even though the web application appears to allow the blocked attachment, the file is not stored in the SAS Content Server.

The problem occurs because the SAS Content Server does not report an error to SAS Enterprise Case Management when you attempt to upload a file with a blocked file extension.

You might see the problem with any client application that stores attachments in the SAS Content Server.

Click the Hot Fix tab in this note to access the hot fix for this issue.

After applying the hot fix, you must manually update a JAR file in order to use the fix in SAS Enterprise Case Management. To activate the fix in SAS Enterprise Case Management, follow the steps below:

Navigate to the SAS-configuration-directory/Levn/Web/WebAppServer/SASServer8_1/sas_webapps/sas.solutions.casemgmt.war/WEB-INF/lib directory. Rename sas.svc.core.jar to sas.svc.core.jar.bak.
Locate the picklist file in the SAS-configuration-directory/Lev/Web/WebAppServer/SASServer1_1/sas_webapps/sas.svcs.scs.war/WEB-INF directory.
Open the picklist file in a text editor, and search for "name=sas.svc.core." Find the version associated with "sas.svc.core":
- name=sas.svc.core
- version=version_info
Find the sas.svc.core.jar file in the directory identified by the version attribute in the picklist file:
SAS-installation-directory/SASVersionedJarRepository/eclipse/plugins/sas.svc.core_version_info.
Copy the sas.svc.core.jar file from the directory identified in step 4 to the directory identified in step 1,
SAS-configuration-directory/Levn/Web/WebAppServer/SASServer8_1/sas_webapps/sas.solutions.casemgmt.war/WEB-INF/lib.
Restart SASServer8_1.

Operating System and Release Information

Product Family	Product	System	Product Release		SAS Release
Product Family	Product	System	Reported	Fixed*	Reported	Fixed*
SAS System	SAS Web Infrastructure Platform	Microsoft® Windows® for x64	9.4		9.4 TS1M0
		64-bit Enabled AIX	9.4		9.4 TS1M0
		64-bit Enabled Solaris	9.4		9.4 TS1M0
		HP-UX IPF	9.4		9.4 TS1M0
		Linux for x64	9.4		9.4 TS1M0
		Solaris for x64	9.4		9.4 TS1M0

* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.

Type:	Problem Note
Priority:	medium

Date Modified:	2020-01-08 15:41:44
Date Created:	2019-11-07 10:01:05

Support

Problem Note 65077: SAS® Enterprise Case Management does not report an error when you attempt to attach a file with a blocked file extension

Operating System and Release Information