Uploaded image for project: 'camunda BPM'
  1. camunda BPM
  2. CAM-5180

I can use separate permissions to grant a user for different task actions

    Details

    • Type: Feature Request
    • Status: Closed
    • Priority: L3 - Default
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 7.5.0, 7.5.0-alpha4
    • Component/s: engine
    • Labels:

      Description

      If a user is granted to UPDATE a task, the user is able to

      • reassign the task to another user
      • add/delete from the candidate group(s)/user(s)
      • change the task's due date
      • complete/submit the task
      • claim the task
      • etc.

      AT:

      • there exists separate permissions
        • one permission "TASK_WORK" to claim and complete/submit the task
        • one permission "TASK_ASSIGN", which summarize the following actions: reassign the task, add/delete candidate groups/users, etc.
        • the permissions can be set on task and process definition level
        • the permission UPDATE includes both these other permissions.

      Note:

      • the implementation should be backward compatible

        Issue Links

          Activity

          roman.smirnov Smirnov Roman created issue -
          michael.schoettes Michael Schoettes made changes -
          Field Original Value New Value
          Link This issue is depended on by SUPPORT-2020 [ SUPPORT-2020 ]
          gimbel Robert Gimbel made changes -
          Fix Version/s 7.5.0 [ 14091 ]
          meyer Daniel Meyer made changes -
          Assignee Deivarayan Azhagappan [ deivarayan.azhagappan ]
          meyer Daniel Meyer made changes -
          Link This issue is depended on by CAM-5665 [ CAM-5665 ]
          meyer Daniel Meyer made changes -
          Description If a user is granted to {{UPDATE}} a task, the user is able to
          - reassign the task to another user
          - add/delete from the candidate group(s)/user(s)
          - change the task's due date
          - complete/submit the task
          - claim the task
          - etc.

          AT:
          - there exists separate permissions
          -- one permission to claim and complete/submit the task
          -- one permission which summarize the following actions: reassign the task, add/delete candidate groups/users, etc.

          Note:
          - the implementation should be backward compatible
          If a user is granted to {{UPDATE}} a task, the user is able to
          - reassign the task to another user
          - add/delete from the candidate group(s)/user(s)
          - change the task's due date
          - complete/submit the task
          - claim the task
          - etc.

          AT:
          - there exists separate permissions
          -- one permission "TASK_WORK" to claim and complete/submit the task
          -- one permission "TASK_ASSIGN", which summarize the following actions: reassign the task, add/delete candidate groups/users, etc.

          Note:
          - the implementation should be backward compatible
          meyer Daniel Meyer made changes -
          Link This issue is depended on by CAM-5667 [ CAM-5667 ]
          meyer Daniel Meyer made changes -
          Description If a user is granted to {{UPDATE}} a task, the user is able to
          - reassign the task to another user
          - add/delete from the candidate group(s)/user(s)
          - change the task's due date
          - complete/submit the task
          - claim the task
          - etc.

          AT:
          - there exists separate permissions
          -- one permission "TASK_WORK" to claim and complete/submit the task
          -- one permission "TASK_ASSIGN", which summarize the following actions: reassign the task, add/delete candidate groups/users, etc.

          Note:
          - the implementation should be backward compatible
          If a user is granted to {{UPDATE}} a task, the user is able to
          - reassign the task to another user
          - add/delete from the candidate group(s)/user(s)
          - change the task's due date
          - complete/submit the task
          - claim the task
          - etc.

          AT:
          - there exists separate permissions
          -- one permission "TASK_WORK" to claim and complete/submit the task
          -- one permission "TASK_ASSIGN", which summarize the following actions: reassign the task, add/delete candidate groups/users, etc.
          -- the permissions can be set on task and process definition level
          -- the permission UPDATE includes both these other permissions.

          Note:
          - the implementation should be backward compatible
          gimbel Robert Gimbel made changes -
          Remote Link This issue links to "Page (camunda confluence)" [ 10913 ]
          deivarayan.azhagappan Deivarayan Azhagappan made changes -
          Status Open [ 1 ] In Progress [ 3 ]
          deivarayan.azhagappan Deivarayan Azhagappan made changes -
          Status In Progress [ 3 ] Open [ 1 ]
          deivarayan.azhagappan Deivarayan Azhagappan made changes -
          Status Open [ 1 ] In Progress [ 3 ]
          meyer Daniel Meyer made changes -
          Link This issue is related to CAM-5866 [ CAM-5866 ]
          deivarayan.azhagappan Deivarayan Azhagappan made changes -
          Status In Progress [ 3 ] Resolved [ 5 ]
          Original Estimate 0 minutes [ 0 ]
          Remaining Estimate 0 minutes [ 0 ]
          Assignee Deivarayan Azhagappan [ deivarayan.azhagappan ] Smirnov Roman [ roman.smirnov ]
          Resolution Fixed [ 1 ]
          roman.smirnov Smirnov Roman made changes -
          Assignee Smirnov Roman [ roman.smirnov ] Daniel Meyer [ meyer ]
          Hide
          meyer Daniel Meyer added a comment -

          as discussed: we should stick with variable modifiactions requiring UPDATE permission

          Show
          meyer Daniel Meyer added a comment - as discussed: we should stick with variable modifiactions requiring UPDATE permission
          meyer Daniel Meyer made changes -
          Assignee Daniel Meyer [ meyer ] Deivarayan Azhagappan [ deivarayan.azhagappan ]
          meyer Daniel Meyer made changes -
          Status Resolved [ 5 ] In Progress [ 3 ]
          Hide
          deivarayan.azhagappan Deivarayan Azhagappan added a comment -
          • Changed variable modifications requiring UPDATE permission
          Show
          deivarayan.azhagappan Deivarayan Azhagappan added a comment - Changed variable modifications requiring UPDATE permission
          deivarayan.azhagappan Deivarayan Azhagappan made changes -
          Status In Progress [ 3 ] Resolved [ 5 ]
          Assignee Deivarayan Azhagappan [ deivarayan.azhagappan ] Daniel Meyer [ meyer ]
          meyer Daniel Meyer made changes -
          Link This issue is related to SUPPORT-2020 [ SUPPORT-2020 ]
          meyer Daniel Meyer made changes -
          Link This issue is related to SUPPORT-2020 [ SUPPORT-2020 ]
          meyer Daniel Meyer made changes -
          Status Resolved [ 5 ] In Test [ 10004 ]
          meyer Daniel Meyer made changes -
          Assignee Daniel Meyer [ meyer ]
          michael.schoettes Michael Schoettes made changes -
          Assignee Michael Schoettes [ michael.schoettes ]
          michael.schoettes Michael Schoettes made changes -
          Rank Ranked higher
          michael.schoettes Michael Schoettes made changes -
          Status In Test [ 10004 ] Closed [ 6 ]
          meyer Daniel Meyer made changes -
          Fix Version/s 7.5.0-alpha4 [ 14593 ]
          gimbel Robert Gimbel made changes -
          Remote Link This issue links to "Page (camunda confluence)" [ 10913 ] This issue links to "Page (camunda confluence)" [ 10913 ]
          gimbel Robert Gimbel made changes -
          Remote Link This issue links to "Page (camunda confluence)" [ 10913 ] This issue links to "Page (camunda confluence)" [ 10913 ]
          gimbel Robert Gimbel made changes -
          Remote Link This issue links to "Page (camunda confluence)" [ 10913 ] This issue links to "Page (camunda confluence)" [ 10913 ]
          gimbel Robert Gimbel made changes -
          Remote Link This issue links to "Page (camunda confluence)" [ 10913 ] This issue links to "Page (camunda confluence)" [ 10913 ]
          gimbel Robert Gimbel made changes -
          Remote Link This issue links to "Page (camunda confluence)" [ 10913 ] This issue links to "Page (camunda confluence)" [ 10913 ]
          gimbel Robert Gimbel made changes -
          Remote Link This issue links to "Page (camunda confluence)" [ 11354 ]
          thorben.lindhauer Thorben Lindhauer made changes -
          Workflow camunda BPM [ 32154 ] Backup_camunda BPM [ 60957 ]

            People

            • Assignee:
              michael.schoettes Michael Schoettes
              Reporter:
              roman.smirnov Smirnov Roman
            • Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Development