<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Activiti REST and permissions in Alfresco Archive</title>
    <link>https://connect.hyland.com/t5/alfresco-archive/activiti-rest-and-permissions/m-p/192955#M146085</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;SPAN&gt;Hi,&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;With activiti explorer i have created a new user called "r3dge", member of the group "cpe". Then i have sent a REST request with the user "r3dge" : &lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;GET &lt;/SPAN&gt;&lt;A href="http://localhost:8080/activiti-rest/service/runtime/tasks" rel="nofollow noopener noreferrer"&gt;http://localhost:8080/activiti-rest/service/runtime/tasks&lt;/A&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;In the response body i found all tasks pending for all groups and not only task assigned to group my user is taking part.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Does that means that there are no permissions applied in the REST API ?&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Thanks&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Wed, 27 May 2015 09:17:50 GMT</pubDate>
    <dc:creator>r3dge</dc:creator>
    <dc:date>2015-05-27T09:17:50Z</dc:date>
    <item>
      <title>Activiti REST and permissions</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/activiti-rest-and-permissions/m-p/192955#M146085</link>
      <description>Hi,With activiti explorer i have created a new user called "r3dge", member of the group "cpe". Then i have sent a REST request with the user "r3dge" : GET http://localhost:8080/activiti-rest/service/runtime/tasksIn the response body i found all tasks pending for all groups and not only task assigned</description>
      <pubDate>Wed, 27 May 2015 09:17:50 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/activiti-rest-and-permissions/m-p/192955#M146085</guid>
      <dc:creator>r3dge</dc:creator>
      <dc:date>2015-05-27T09:17:50Z</dc:date>
    </item>
    <item>
      <title>Re: Activiti REST and permissions</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/activiti-rest-and-permissions/m-p/192956#M146086</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;SPAN&gt;Hi,&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;By default there are no permissions applied to the Activiti REST API. With Spring Security there's the opportunity to implement your own permission scheme when necessary.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Best regards,&lt;/SPAN&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Thu, 28 May 2015 17:43:52 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/activiti-rest-and-permissions/m-p/192956#M146086</guid>
      <dc:creator>trademak</dc:creator>
      <dc:date>2015-05-28T17:43:52Z</dc:date>
    </item>
    <item>
      <title>Re: Activiti REST and permissions</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/activiti-rest-and-permissions/m-p/192957#M146087</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;SPAN&gt;thank you for your answer&lt;/SPAN&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Fri, 29 May 2015 06:00:11 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/activiti-rest-and-permissions/m-p/192957#M146087</guid>
      <dc:creator>r3dge</dc:creator>
      <dc:date>2015-05-29T06:00:11Z</dc:date>
    </item>
  </channel>
</rss>

