topic Re: Accessing another user task in Alfresco Archive

Accessing another user task

tobix10 — Mon, 02 Sep 2013 08:29:55 GMT

Hello, when I try to get details of a task from account which is not an owner one I receive exception: <blockquote>org.alfresco.repo.security.permissions.AccessDeniedException: Accessing task with id='activiti$12495' is not allowed for user 'username'.</blockquote>From admin console I ga

Re: Accessing another user task

afaust — Sat, 07 Sep 2013 15:45:52 GMT

Hello,

you can't assign permissions on tasks. If you want to modify the way the workflow service limits the view on tasks you need to provide an alternative implementation for bean "WorkflowService_security" (introduced in Alfresco 4.1.5 / 4.2d). This interceptor is responsible for managing access to workflows and tasks. Unfortunately, any change will have to involve Java coding and be universal in nature (affecting all kinds of workflows / tasks).

Regards
Axel

Re: Accessing another user task

lyles — Thu, 24 Oct 2013 15:47:00 GMT

Is it possible to easily disable this workflow service security so that access to the workflow details behaves the way that it did in 4.2.c?

I'm testing a custom workflow in Alfresco 4.2.e. The workflow has several review tasks and I have discovered that participants in the workflow can now only see their own task and the start task. This is not acceptable, as participants must be able to see the comments from all previous tasks.

This seems like a bug.

EDIT:
I'll answer my own question.
The workflow service security can be easily disabled by modifying:
alfresco/WEB-INF/classes/alfresco/public-services-security-context.xml

Change


    <bean id="WorkflowService_security" class="org.alfresco.service.cmr.workflow.WorkflowPermissionInterceptor" >
      <property name="personService"><ref bean="personService"/></property>
      <property name="authorityService"><ref bean="authorityService"/></property>
      <property name="workflowService"><ref bean="workflowServiceImpl" /></property>
    </bean>
‍‍‍‍‍‍‍


    <!– This service now has no restrictions. –>
    <bean id="WorkflowService_security" class="org.alfresco.repo.security.permissions.impl.AlwaysProceedMethodInterceptor" />
‍‍‍‍

Re: Accessing another user task

marcus_svensson — Fri, 22 Nov 2013 10:01:54 GMT

Great this was what I was looking for as well! Thanks!

Re: Accessing another user task

jservajean — Fri, 21 Feb 2014 09:34:24 GMT

To make the permissions more specific, I think you have 2 more alternatives :
- stick to the out-of-the-box properties in your task model to define your tasks assignees (bpm_assignee, bpm_assignees, bpm_groupAssignee, bpm_groupAssignees and bpm_pooledActors)
- rewrite the WorkflowPermissionInterceptor, specifically the method isInitiatorOrAssignee(WorkflowTask wt, String userName) and ad in here your custom properties, users, etc., and use it to redefine the Spring bean named "WorkflowService_security"