Uploaded image for project: 'camunda BPM'
  1. camunda BPM
  2. CAM-7462

I can only assign tasks to users I have READ access to

    Details

    • Type: Feature Request
    • Status: Closed
    • Priority: L3 - Default
    • Resolution: Won't Do
    • Affects Version/s: None
    • Fix Version/s: 7.7.0, 7.7.0-alpha2
    • Component/s: engine
    • Labels:
      None

      Description

      AT:
      When

      • assigning a task to a user that
        • does not exist OR
        • the currently authenticated user is not authorized to read the target assignees profile

      Then

      • an exception is thrown AND
      • the assignment of the task is not changed

        Issue Links

          Activity

          Hide
          svetlana.dorokhova Svetlana Dorokhova added a comment -

          Sebastian Stamm, in your opinion, can we widen the checks on

          • delegating the task (set owner + set assignee)
          • add candidate group/user (add identity link)
            ?
          Show
          svetlana.dorokhova Svetlana Dorokhova added a comment - Sebastian Stamm , in your opinion, can we widen the checks on delegating the task (set owner + set assignee) add candidate group/user (add identity link) ?
          Hide
          sebastian.stamm Sebastian Stamm added a comment -

          Svetlana Dorokhova, we should check the user / group everywhere when we work with them. CAM-5181 was the original issue for that before we changed it to only include a small subset.

          Valentin Vago, is it correct that this feature request is still open? It reads exactly like what we implemented in CAM-5181

          Show
          sebastian.stamm Sebastian Stamm added a comment - Svetlana Dorokhova , we should check the user / group everywhere when we work with them. CAM-5181 was the original issue for that before we changed it to only include a small subset. Valentin Vago , is it correct that this feature request is still open? It reads exactly like what we implemented in CAM-5181

            People

            • Assignee:
              svetlana.dorokhova Svetlana Dorokhova
              Reporter:
              sebastian.stamm Sebastian Stamm
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Development