IBM TRIRIGA Application Platform, Version 3.5.3.6

Readme file for 3.5.3.6 IBM TRIRIGA Application Platform

This fix pack updates the IBM® TRIRIGA® Application Platform product.

Copyright© International Business Machines Corporation 2019. All rights reserved. US Government Users Restricted Rights - Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.

Prerequisites and supported products

To install this fix pack, you must have TRIRIGA Application Platform 3.5.3 installed. Platform fix packs are cumulative. All previous 3.5.3 fix packs are included in this fix pack.

What's new in this fix pack

When the IBM TRIRIGA Application Platform 3.5.0 was released in late 2015, it introduced an MVC-based UX framework for Polymer-based applications, also known as the IBM TRIRIGA UX Framework. At the time, our UX release was based on Polymer 1. Our UX framework now supports both Polymer 3 and Polymer 1 UX apps. Both types of UX apps can coexist together in the same environment. If you are interested in converting your custom UX apps from Polymer 1 to Polymer 3, see "Converting UX to Polymer 3" at https://www.ibm.com/developerworks/community/wikis/home?lang=en#!/wiki/IBM%20TRIRIGA1/page/Converting UX to Polymer 3.

Information resources

IBM Knowledge Center

http://www.ibm.com/support/knowledgecenter/SSHEB3_3.5.3/com.ibm.tap.doc/product_landing.html

Access the Knowledge Center to view the product documentation. Topics include product overviews; installation and configuration tasks; instructions for using, administering, and troubleshooting the product; and security information.

Real Estate and Facilities Management community

http://www.ibm.com/developerworks/community/groups/service/html/communityview?communityUuid=9e3a5b9d-6a06-4796-a6c1-5137b626e39c

Use the Real Estate and Facilities Management community to review information such as best practices, performance and tuning, and product integrations. You can also collaborate with IBM experts and the broader user community.

IBM TRIRIGA Application Platform support portal

https://www.ibm.com/support/home/product/B587581X76101M05/IBM_TRIRIGA_Application_Platform

The IBM support resources portal provides access to tools and resources to keep your systems, software, and applications running smoothly. From the support resources portal you can find fixes, service requests, useful links, and an enhanced search to help you find information quickly.

IBM TRIRIGA Information and Support Resources

http://www.ibm.com/support/docview.wss?uid=swg21611356

The IBM TRIRIGA Information and Support Resources page is a collection of links and other resources that provides information and assistance for IBM TRIRIGA products.

Installing the IBM TRIRIGA Application Platform 3.5.3.6 fix pack

To install the TRIRIGA Application Platform 3.5.3.6 fix pack, refer to the following general instructions.

Procedure

Ensure that no database configuration changes are pending and there are no entries in the WF_EVENT or EF_QUEUE tables. You can check the status of the tables by running the following SQL statements: select count(*) from WF_EVENT and select count(*) from EF_QUEUE.
For IBM WebSphere® Application Server Liberty profile, stop all application servers before continuing the installation.
For IBM WebSphere Application Server and Oracle® WebLogic Server, confirm that this server is started and stop all other application servers.
Take a backup of the database and the existing TRIRIGA install directory for each server. If necessary, you can use the backups to revert the system.
Download the 3.5.3-TIV-TAP-FP006 file.
Extract the file. You can extract the fix pack file into any directory.
Run one of following patch executable files: fixpack_tririga_v3.5.3.6_Windows.exe, fixpack_tririga_v3.5.3.6_Linux.bin, or fixpack_tririga_v3.5.3.6_AIX.bin.
In the Introduction pane, select Next or Enter.
In the license agreement, accept the terms and select Next or Enter.
Choose the directory where IBM TRIRIGA is installed. For example, the following directories: c:\ibm\tririga\ or /opt/ibm/tririga/.
Review the information and select Next or Enter.
The fix pack process patches the WAR file and runs any platform database fix pack scripts.
Note: In the patch folder for the 3.5.3.6 fix pack, when the fix pack installer backs up the ibm-tririga.war file, the backup .war file appears as the ibs-tririga.war.bak file.
For WebSphere Application Server Liberty Core profile, the WAR file deploys and the cache directories are removed. You must restart Liberty.
For WebSphere Application Server, the WAR file redeploys and starts automatically. If it fails, you need to manually redeploy the WAR file. The WAR file is located in one of the following root TRIRIGA install directories: c:\ibm\tririga\ibm-tririga.war or /opt/ibm/tririga/ibm-tririga.war. Refer to IBM's instructions for deploying a .war application.
For Oracle WebLogic Server, delete all of the cache, tmp, and .wlnotdelete directories under WebLogic's TRIRIGA domain after the fix pack installation is complete, as these directories might contain files that are left over from the previous application/ear installation. For example: <weblogic>\user_projects\domains\tririga10domain\servers\tririgaServer\tmp or <weblogic>\user_projects\domains\tririga10domain\servers\tririgaServer\cache
For Oracle WebLogic Server, the fix pack process attempts to redeploy the WAR file into the managed server. However, because of conditions in the server environment outside of IBM TRIRIGA's control, you might need to manually redeploy the WAR file. Restart the application server when the fix pack completes and check the build number in the IBM TRIRIGA Administrator Console. If the old .war file still shows, redeploy the .war file. Refer to Oracle's instructions for deploying a .war application into the managed server.

What to do next

After the fix pack install completes, check the platform release in the IBM TRIRIGA Administrator Console. Verify that the fix pack you just installed is listed.

Known limitations

The following items are known limitations concerning the IBM TRIRIGA Application Platform 3.5.3.6 fix pack.

Area of Impact	Description
Reporting	Fixed columns within queries and reports do not work. The Fixed Column Count option in the Report Builder has no impact. (Tri-51509-IJ04506)
UX Framework	Globalization of TRIRIGA UX apps created with Polymer 3 is scheduled for a future release.

Resolved issues

The following issues were resolved in the TRIRIGA Application Platform 3.5.3.6 fix pack.

Security issues

Security issues are resolved in fix packs to ensure that the TRIRIGA Application Platform is secure.

CVSS

IBM does not intend to provide vulnerability details that might enable someone to craft an exploit. IBM uses the Common Vulnerability Scoring System (CVSS) as a standard for communicating the impact of security vulnerabilities in IBM products and solutions. CVSS is an industry open standard for assessing the severity or impact of computer system security vulnerabilities. This standard attempts to establish a numeric measure that represents how much concern or attention the vulnerability warrants. The resulting CVSS score is based on an assessment of a series of metrics. The CVSS Base Score represents the intrinsic and fundamental characteristics of the vulnerability that are typically constant over time and across user environments.

For more information, see http://www-03.ibm.com/security/secure-engineering/bulletins.html

The following security issues were resolved in 3.5.3.6.

CVE Score	Title	CVSS Base Score	CVSS Temporal Score	CVSS Vector
CVE-2018-2008	Information Disclosure Vulnerability	4.3	For the current score see https://exchange.xforce.ibmcloud.com/vulnerabilities/155146	(CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
CVE-2018-15756	Denial of Service Vulnerability	7.5	For the current score see https://exchange.xforce.ibmcloud.com/vulnerabilities/151641	(CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
CVE-2019-4207	Information Disclosure Vulnerability	4	For the current score see https://exchange.xforce.ibmcloud.com/vulnerabilities/159128	(CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
CVE-2019-4208	XML External Entity Injection (XXE) Vulnerability	7.1	For the current score see https://exchange.xforce.ibmcloud.com/vulnerabilities/159129	(CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L)

General issues

APAR Number	Description
IJ12416	The Excel spreadsheet that is created after you export a TRIRIGA report no longer has the word "null" in cells where the field value was empty in the TRIRIGA report. Each value in the Excel spreadsheet no longer has a blank space at the end of the value. Depending on data composition and the Excel client you are using, the data in a column may not wrap as expected. (Tri-57351)
IJ12587	If an extra white space is appended to a report header, it does not cause an error when the report is exported to an Excel file. (Tri-57602)
IJ13137	Improved the load time for the Report Manager landing pages (My Reports, Community, System Reports, Administration). When the forms in a Form Builder landing page have several revisions, improved the load time for the Form Builder landing page. The Object Label column on the Form Builder landing page now displays the In Progress object label for new but not yet published forms. (Tri-57603)
IJ13987	On a page that has a collapsed query section, if you expand the query section, the expected content now appears regardless of whether the query section is collapsed by default or expanded by default. (Tri-57962)
	The Field Services Named licenses for on premise (LICENSE_IBM_TRIRIGA_Field_Services_Named.properties) and SaaS (LICENSE_IBM_TRIRIGA_Facilities_and_Real_Estate_Management_on_Cloud_Field_Services_Named.properties) were updated. If you have the 'Named' Field Services license, you must contact IBM to obtain the corresponding new 'Authorized' Field Services license. The LICENSE_IBM_TRIRIGA_Field_Services_Authorized.properties file is available on Passport Advantage. After you upgrade to 3.5.3.6, the 'Named' license no longer works. If your server.log contains a message such as the following, you must remove the LICENSE_IBM_TRIRIGA_Field_Services_Named.properties file and add the LICENSE_IBM_TRIRIGA_Field_Services_Authorized.properties file to each /config/licenses directory and restart the server. The LICENSE_IBM_TRIRIGA_Field_Services_Named.properties file is no longer needed. 2019-01-23 13:27:35,444 ERROR [com.tririga.app.PropertiesServiceImpl](Default Executor-thread-26) The following license LICENSE_IBM_TRIRIGA_Field_Services_Named was deprecated. If you do not have the LICENSE_IBM_TRIRIGA_Field_Services_Authorized license, contact IBM to obtain the new license. After it is in place on all servers, remove the LICENSE_IBM_TRIRIGA_Field_Services_Named license from all servers. After startup with the new license in place, users with the deprecated license automatically have the new license. After you restart the server, users that previously had a license to IBM TRIRIGA Field Services Named automatically have a license to IBM TRIRIGA Field Services Authorized. The access granted by the IBM TRIRIGA Field Services Authorized license is the same as the IBM TRIRIGA Field Services Named license. The ERROR continues to log until the LICENSE_IBM_TRIRIGA_Field_Services_Named is removed from the server. (Tri-55160)
	triplat-auth-check has a new property named model-name that you can use to check the permission for the specified model. It has two methods: getModelPermission checks the permission for a specified model and getActionPermission checks the permission for a specified action. (Tri-56528)
	A new data source named WORK_PLANNER is added to the UX Framework model builder. A new Polymer 3 UX component named triplat-query-work-planner was created to support the usage to WORK_PLANNER datasources. For more information, read the documentation for the triplat-query-work-planner component in the UX Framework doc pages. (Tri-56544)
	The following license BIRT reports are now part of the IBM TRIRIGA Application Platform. Do not edit these reports. If you do edit them, they are reloaded on the next application server startup. Daily License Usage Report for Selected Month (triLicense - BIRT - Daily License Usage Report for Selected Month) Daily User Load Report for Selected Month (triLicense - BIRT - Daily User Load Report for Selected Month) Hourly License Usage Report for Selected Day (triLicense - BIRT - Hourly License Usage Report for Selected Day) Hourly User Load Report for Selected Day (triLicense - BIRT - Hourly User Load Report for Selected Day) Monthly License Usage Report for Selected Year (triLicense - BIRT - Monthly License Usage Report for Selected Year) Monthly User Load Report for Selected Year (triLicense - BIRT - Monthly User Load Report for Selected Year) (Tri-57035)
	The installation instructions in the fix pack installer and the readme are consistent and more accurate regarding required web server state during installation. (Tri-57533)
	In the triplat-search-input component, you can now style placeholder text by using the new triplat-search-input-placeholder mixin. (Tri-57534)
	In the triblock-table component, you use the new on-mouseover event to access the on-row-mouse-over attribute. (Tri-57573)
	Automatic redeployment to WebLogic now occurs. You do not need to apply the xercesImpl.jar file. (Tri-57773)
	The UX Framework documentation page (/p/web/doc) now displays the Polymer 3 components. (Tri-57783)
	License table now supports the Work Planner UX application. triTaskAllocation->triTaskResourceAllocation is now a licensed object. (Tri-57838)
	In the triplat-number-input component, you can now style with CSS mixins and hide the label of paper-input by using the noLabelFloat property. (Tri-58040)

Notices

This information was developed for products and services offered in the US. This material might be available from IBM in other languages. However, you may be required to own a copy of the product or product version in that language in order to access it.

IBM may not offer the products, services, or features discussed in this document in other countries. Consult your local IBM representative for information on the products and services currently available in your area. Any reference to an IBM product, program, or service is not intended to state or imply that only that IBM product, program, or service may be used. Any functionally equivalent product, program, or service that does not infringe any IBM intellectual property right may be used instead. However, it is the user's responsibility to evaluate and verify the operation of any non-IBM product, program, or service.

IBM may have patents or pending patent applications covering subject matter described in this document. The furnishing of this document does not grant you any license to these patents. You can send license inquiries, in writing, to:

IBM Director of Licensing
IBM Corporation
North Castle Drive, MD-NC119
Armonk, NY 10504-1785
US

For license inquiries regarding double-byte character set (DBCS) information, contact the IBM Intellectual Property Department in your country or send inquiries, in writing, to:

Intellectual Property Licensing
Legal and Intellectual Property Law
IBM Japan Ltd.
19-21, Nihonbashi-Hakozakicho, Chuo-ku
Tokyo 103-8510, Japan

INTERNATIONAL BUSINESS MACHINES CORPORATION PROVIDES THIS PUBLICATION "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF NON-INFRINGEMENT, MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Some jurisdictions do not allow disclaimer of express or implied warranties in certain transactions, therefore, this statement may not apply to you.

This information could include technical inaccuracies or typographical errors. Changes are periodically made to the information herein; these changes will be incorporated in new editions of the publication. IBM may make improvements and/or changes in the product(s) and/or the program(s) described in this publication at any time without notice.

Any references in this information to non-IBM websites are provided for convenience only and do not in any manner serve as an endorsement of those websites. The materials at those websites are not part of the materials for this IBM product and use of those websites is at your own risk.

IBM may use or distribute any of the information you provide in any way it believes appropriate without incurring any obligation to you.

Licensees of this program who wish to have information about it for the purpose of enabling: (i) the exchange of information between independently created programs and other programs (including this one) and (ii) the mutual use of the information which has been exchanged, should contact:

IBM Director of Licensing
IBM Corporation
North Castle Drive, MD-NC119
Armonk, NY 10504-1785
US

Such information may be available, subject to appropriate terms and conditions, including in some cases, payment of a fee.

The licensed program described in this document and all licensed material available for it are provided by IBM under terms of the IBM Customer Agreement, IBM International Program License Agreement or any equivalent agreement between us.

The performance data discussed herein is presented as derived under specific operating conditions. Actual results may vary.

The client examples cited are presented for illustrative purposes only. Actual performance results may vary depending on specific configurations and operating conditions.

The performance data and client examples cited are presented for illustrative purposes only. Actual performance results may vary depending on specific configurations and operating conditions.

Information concerning non-IBM products was obtained from the suppliers of those products, their published announcements or other publicly available sources. IBM has not tested those products and cannot confirm the accuracy of performance, compatibility or any other claims related to non-IBM products. Questions on the capabilities of non-IBM products should be addressed to the suppliers of those products.

Statements regarding IBM's future direction or intent are subject to change or withdrawal without notice, and represent goals and objectives only.

All IBM prices shown are IBM's suggested retail prices, are current and are subject to change without notice. Dealer prices may vary.

This information is for planning purposes only. The information herein is subject to change before the products described become available.

This information contains examples of data and reports used in daily business operations. To illustrate them as completely as possible, the examples include the names of individuals, companies, brands, and products. All of these names are fictitious and any similarity to actual people or business enterprises is entirely coincidental.

This information contains sample application programs in source language, which illustrate programming techniques on various operating platforms. You may copy, modify, and distribute these sample programs in any form without payment to IBM, for the purposes of developing, using, marketing or distributing application programs conforming to the application programming interface for the operating platform for which the sample programs are written. These examples have not been thoroughly tested under all conditions. IBM, therefore, cannot guarantee or imply reliability, serviceability, or function of these programs. The sample programs are provided "AS IS", without warranty of any kind. IBM shall not be liable for any damages arising out of your use of the sample programs.

Each copy or any portion of these sample programs or any derivative work must include a copyright notice as follows:
© (your company name) (year).
Portions of this code are derived from IBM Corp. Sample Programs.
© Copyright IBM Corp. _enter the year or years_.

Trademarks

IBM, the IBM logo, and ibm.com are trademarks or registered trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the web at "Copyright and trademark information" at www.ibm.com/legal/copytrade.shtml.

Terms and conditions for product documentation

Permissions for the use of these publications are granted subject to the following terms and conditions.

Applicability

These terms and conditions are in addition to any terms of use for the IBM website.

Personal use

You may reproduce these publications for your personal, noncommercial use provided that all proprietary notices are preserved. You may not distribute, display or make derivative work of these publications, or any portion thereof, without the express consent of IBM.

Commercial use

You may reproduce, distribute and display these publications solely within your enterprise provided that all proprietary notices are preserved. You may not make derivative works of these publications, or reproduce, distribute or display these publications or any portion thereof outside your enterprise, without the express consent of IBM.

Rights

Except as expressly granted in this permission, no other permissions, licenses or rights are granted, either express or implied, to the publications or any information, data, software or other intellectual property contained therein.

IBM reserves the right to withdraw the permissions granted herein whenever, in its discretion, the use of the publications is detrimental to its interest or, as determined by IBM, the above instructions are not being properly followed.

You may not download, export or re-export this information except in full compliance with all applicable laws and regulations, including all United States export laws and regulations.

IBM MAKES NO GUARANTEE ABOUT THE CONTENT OF THESE PUBLICATIONS. THE PUBLICATIONS ARE PROVIDED "AS-IS" AND WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, NON-INFRINGEMENT, AND FITNESS FOR A PARTICULAR PURPOSE.