Uploaded image for project: 'camunda BPM'
  1. camunda BPM
  2. CAM-8139

JavaDoc when AuthorizationException is thrown, is wrong on all Service Interfaces

    Details

    • Type: Bug Report
    • Status: Open
    • Priority: L3 - Default
    • Resolution: Unresolved
    • Affects Version/s: 7.8.0-alpha3, 7.8.0-alpha4
    • Fix Version/s: None
    • Component/s: documentation, engine
    • Labels:
      None

      Description

      For example in runtime service on `messageEventReceived`

         * @throws AuthorizationException
         *          if the user has no {@link Permissions#UPDATE} permission on {@link Resources#PROCESS_INSTANCE}
         *          or no {@link Permissions#UPDATE_INSTANCE} permission on {@link Resources#PROCESS_DEFINITION}.
      

      Instead of OR should be AND. Because currently this means if one of this is missing the exception is thrown, which is wrong since the exception is only thrown if both are missing.

      For starting process instances this is the only case where it is the other way around.

      
         * @throws AuthorizationException
         *          if the user has no {@link Permissions#CREATE} permission on {@link Resources#PROCESS_INSTANCE}
         *          and no {@link Permissions#CREATE_INSTANCE} permission on {@link Resources#PROCESS_DEFINITION}.
      

      Instead of AND should be OR. Because currently this means if both are missing the exception is thrown, which is wrong since the exception is thrown if one of them is missing.

        Activity

        There are no comments yet on this issue.

          People

          • Assignee:
            Unassigned
            Reporter:
            christopher.zell Christopher Zell
          • Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

            • Created:
              Updated:

              Development