[CAM-6883] Filter startable processes by READ and CREATE_INSTANCE permission on process definition resource Created: 18/Oct/16  Updated: 02/Aug/18  Resolved: 17/Jul/18

Status: Closed
Project: camunda BPM
Component/s: tasklist
Affects Version/s: None
Fix Version/s: 7.10.0, 7.10.0-alpha2

Type: Feature Request Priority: L3 - Default
Reporter: Thorben Lindhauer Assignee: Nikola Koevski
Resolution: Fixed Votes: 2
Labels: SUPPORT
Remaining Estimate: 0 minutes
Time Spent: Not Specified
Original Estimate: 0 minutes

Issue Links:
Depedendency
Related
is related to CAM-9084 In Tasklist, I can start only a subse... Closed

 Description   

Starting a process requires CREATE_INSTANCE permission on the respective process definition. The list of startable processes in tasklist should respect this authorization, such that a user cannot see a process that they cannot start anyway.

Current behavior: The query only filters by READ on process definition.



 Comments   
Comment by Thorben Lindhauer [ 20/Nov/17 ]

Hi Paul,

This feature request will not be part of 7.8 and is currently also not scheduled for a future release.

Cheers,
Thorben

Generated at Sat Jul 20 22:16:14 CEST 2019 using JIRA 6.4.6#64021-sha1:33e5b454af4594f54560ac233c30a6e00459507e.