Incorrect License Usage count due to Orphan OBS Unit nodes

Products

• Clarity PPM SaaS
• Clarity PPM On Premise

Issue/Introduction

Deleting an OBS Node which is attached to instance rights is causing incorrect license usage calculation.

STEPS TO REPRODUCE
1. Create an OBS named Fruit and mark it for Access Rights

2. Create a unit under the above OBS and name it as Apple

3. Create a security group named Basic Group

4. In the OBS section of the group, add a Resource - Time Approve rights to the OBS Fruit and Unit - Apple. 

Make sure the OBS Association Mode is set to anything other than Unit and Descendants

5. Create a Test user and grant basic navigate rights to the application like Timesheet Navigate

6. Navigate to License Information portlet 

Expected and Actual: The Test user is showing up under View Only

7. Add the Test user to Basic User Group created in Step 3

8. Navigate to License Information portlet again

Expected and Actual: The Test user is showing up under Restricted because the user has Resource - Time Approve rights

9. Navigate to the OBS Fruit and delete the unit Apple

10. Navigate to Basic Group - OBs and you will notice the Resource Approve Time OBS rights is gone because the OBS unit is deleted. 

11. Navigate to License Information portlet again

Expected: Since the OBS unit is deleted and the Resource Approve Time OBS rights is not in the group anymore, the TEST user should show under View Only license

Actual: The TEST user still shows up under Restricted because the OBS_UNIT_ONLY under cmn_sec_assgnd_right is still present as an orphan record

Workaround: Xog out the Basic User group, change the group code and create a new group. Remove all users from the original Basic User Group

 

Environment

16.3.0 and can also reproduce in 16.3.2

Resolution

DE170826, fixed in 16.3.3

Additional Information

The below query from the view helps to identify why the Restricted Usage persist even when the OBS Node is deleted

SELECT g.group_code,
    ug.group_id, r.*
FROM    cmn_sec_assgnd_right r,
    cmn_sec_user_groups ug,
    cmn_sec_groups g
WHERE 1=1
    AND g.id = ug.group_id
    AND g.is_active = 1
    and ug.user_id=5274482
    AND r.principal_type = 'GROUP'
    AND r.principal_id = ug.group_id
    AND r.instance_type <> 'SYSTEM'