Uploaded image for project: 'camunda BPM'
  1. camunda BPM
  2. CAM-5180

I can use separate permissions to grant a user for different task actions

    Details

    • Type: Feature Request
    • Status: Closed
    • Priority: L3 - Default
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 7.5.0, 7.5.0-alpha4
    • Component/s: engine
    • Labels:

      Description

      If a user is granted to UPDATE a task, the user is able to

      • reassign the task to another user
      • add/delete from the candidate group(s)/user(s)
      • change the task's due date
      • complete/submit the task
      • claim the task
      • etc.

      AT:

      • there exists separate permissions
        • one permission "TASK_WORK" to claim and complete/submit the task
        • one permission "TASK_ASSIGN", which summarize the following actions: reassign the task, add/delete candidate groups/users, etc.
        • the permissions can be set on task and process definition level
        • the permission UPDATE includes both these other permissions.

      Note:

      • the implementation should be backward compatible

        Issue Links

          Activity

          Hide
          meyer Daniel Meyer added a comment -

          as discussed: we should stick with variable modifiactions requiring UPDATE permission

          Show
          meyer Daniel Meyer added a comment - as discussed: we should stick with variable modifiactions requiring UPDATE permission
          Hide
          deivarayan.azhagappan Deivarayan Azhagappan added a comment -
          • Changed variable modifications requiring UPDATE permission
          Show
          deivarayan.azhagappan Deivarayan Azhagappan added a comment - Changed variable modifications requiring UPDATE permission

            People

            • Assignee:
              michael.schoettes Michael Schoettes
              Reporter:
              roman.smirnov Smirnov Roman
            • Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Development