Fraska Portal

Exploring the WebSphere Commerce world

  • You are here:  
  • Home
  • Blog

WebSphere Commerce, CommandLevelAuthorizationCache

Posted by on in Cache
  • Font size: Larger Smaller
  • Hits: 3614
  • 46 Comments
  • Subscribe to this entry
  • Print
WebSphere Commerce, CommandLevelAuthorizationCache

Few months ago I was working for a troubleshooting investigation regarding an ACL not expected behavior. My client was on iSeries with WCS 7 and B2B stores. I found the issue was deriving because of a base cache default configuration set by InitializationServlet.

The following brief article describe the issue and the solution adopted.

Target:

WebSphere Commerce developers

Environment:

  • iSeries
  • B2B stores
  • WebSphere Commerce Enterprise v 7.0.0.9 FEP8
  • WebSphere Application Server 7.0.0.31
  • DB2

The issue

The client was experiencing a not expecting behavior on user HP redirection after login for guests and special-guests (which have specific roles). In particular, digging the Dynacache, we found the CommandLevelAuthorizationCacheCmdImpl cache entry was the same for guest and special guests.

 

The investigation

The Cache Monitor was reporting the following data

com.ibm.commerce.accesscontrol.policymanager.CommandLevelAuthorizationCacheCmdImpl:
getUserTag=TAG_GUEST_USER:
getAction=Execute:
getStoreId=10201:
getResourceInterfaceName=<customer implementation>

The confirmation the root cause of the issue was above object we've made some test deleting this specific object and everything was working.

The command CommandLevelAuthorizationCacheCmdImpl is cached in the data cache WCUserDistributedMapCache and configured in the CrossTransactionCache included in the wc-server.xml:

<com.ibm.commerce.membergroup.commands.ListMemberGroupsForUserCmdImpl enabled="true"/>
<com.ibm.commerce.user.objsrc.DemographicsCache enabled="true"/>
<com.ibm.commerce.dynacache.commands.MemberGroupsCache enabled="true"/>
<com.ibm.commerce.user.objsrc.MemberGroupMemberCache enabled="true"/>
<com.ibm.commerce.user.objsrc.MemberRelationshipsCache enabled="true"/>
<com.ibm.commerce.user.beansrc.MemberRelationshipsExtendedCache enabled="true"/>
<com.ibm.commerce.user.objsrc.MemberRoleCache enabled="true"/>
<com.ibm.commerce.user.objsrc.MemberCache enabled="true"/>
<com.ibm.commerce.user.objsrc.UserCache enabled="true"/>
<com.ibm.commerce.user.objsrc.UserRegistryCache enabled="true"/>

 By default the CommandLevelAuthorizationCache is enabled (in wc-server.xml) and so the WCUserDistributedMapCache
(https://www.ibm.com/support/knowledgecenter/SSZLC2_7.0.0/com.ibm.commerce.admin.doc/refs/rdcaddcomdatacache.htm?lang=en).

However, disabling the WCUserDistributedMapCache the entries CommandLevelAuthorizationCache were anyway stored in the cache under the baseCache.

 

A possible workaround

The baseCache entries were configured because of the OOTB cachespec.xml stored in the JAR related to the web module InitializationServlet.

I think above cachespec was something not really respecting the configuration of the CrossTransactionCache; in my opinion, if you switch off (from server.xml) the CrossTransactionCache the related and eventual commands (like CommandLevelAuthorizationCacheCmdImpl) should not be cached.

In any case, we had to update the InitializationServlet/cachespec.xml and disable the definition of CommandLevelAuthorizationCacheCmdImpl cache entry.

Rate this blog entry:
0
Tagged in: CommandLevelAuthorizationCacheCmdImpl Data cache Dynacache InitializationServlet WCUserDistributedMapCache

Comments

Leave your comment

Guest
Guest Monday, 18 November 2019

Most Popular Post

WebSphere Commerce, the curious life of a front-end catalog request
Core
Rate this blog entry:
5
36 comment(s) 17734 hits Read More
on 08 October 2014
WebSphere Commerce, the SOLR extension index
Administration
Rate this blog entry:
4
52 comment(s) 16135 hits Read More
on 09 July 2014
WebSphere Commerce, Data Load and SOLR Delta Index
Data Load
Rate this blog entry:
0
128 comment(s) 15268 hits Read More
on 04 June 2013

Tag Cloud

Cores Index Promotions Search Navigation Flow Javacore Quality Quality Assurance Team Thank You CommandLevelAuthorizationCacheCmdImpl FEP7 Store ATP Validation Precision Marketing WebSphere Commerce Marketing SOLR Toolkit Congratulations European stores InitializationServlet Data cache REST Search Expression Processor Content Search Expression Provider Dynacache RAD Migration Management Center Web Activity Tables delta preprocess Inventory non-ATP WebSphere Application Server WebSphere Commerce Developer DataLoad Deadlock Coupons WAS Plugin JR47273 Deploy Troubleshooting Subcore Core Landing page ClassNotFoundException Data Model SoapUI WCUserDistributedMapCache Admin UI Delta Performances

Categories

Latest Blogs

WebSphere Commerce, CommandLevelAuthorizationCache
Cache
Rate this blog entry:
0
Comments (46) Hits (3614)
Posted by Francesco Schettini on 08 December 2016
WebSphere Commerce v8, toolkit exception, ClassNotFound db2
Administration
Rate this blog entry:
1
Comments (36) Hits (4793)
Posted by Francesco Schettini on 18 April 2016
WebSphere Commerce, ATP migration
Store
Rate this blog entry:
0
Comments (37) Hits (6329)
Posted by Francesco Schettini on 28 March 2016
WebSphere Commerce, the curious life of a front-end catalog request
Core
Rate this blog entry:
5
Comments (36) Hits (17734)
Posted by Francesco Schettini on 08 October 2014
WebSphere Commerce, Performance analysis of few European stores
Performance
Rate this blog entry:
0
Comments (27) Hits (4654)
Posted by Francesco Schettini on 22 July 2014