Uploaded image for project: 'camunda BPM'
  1. camunda BPM
  2. CAM-6082

Cannot see variables in tasklist with READ Task Authorization

    Details

      Description

      Given:

      • User has Read Permission on Task
      • User does not have Read Instance Permission on Task's Process Instance
      • Filter defines variables

      Observed Behavior:

      • User cannot see Variables in tasklist (in the list of tasks)

      Expected Behavior:

      • User can see Variables in tasklist (in the list of tasks)

      Hint:

      • Need to run variable instance query for Hal Requests without authorization

        Issue Links

          Activity

          Hide
          yana.vasileva Yana Vasileva added a comment - - edited

          Within 7.11, the described issue might occur again. In order to resolve the issue please follow the steps:
          1. Enable the default read variable permission by process engine configuration [1]
          2. Grant the affected users with READ_INSTANCE_VARIABLE permission for the corresponding process definitions

          [1]: https://docs.camunda.org/manual/latest/user-guide/process-engine/authorization-service/#default-read-variable-permissions

          Show
          yana.vasileva Yana Vasileva added a comment - - edited Within 7.11, the described issue might occur again. In order to resolve the issue please follow the steps: 1. Enable the default read variable permission by process engine configuration [1] 2. Grant the affected users with READ_INSTANCE_VARIABLE permission for the corresponding process definitions [1] : https://docs.camunda.org/manual/latest/user-guide/process-engine/authorization-service/#default-read-variable-permissions

            People

            • Assignee:
              svetlana.dorokhova Svetlana Dorokhova
              Reporter:
              meyer Daniel Meyer
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Development