topic Re: Task Model Permissions vs. Attachment Permissions in Alfresco Archive

Task Model Permissions vs. Attachment Permissions

srobinson — Tue, 12 Feb 2013 16:35:56 GMT

I have a client requirement that wants the attachment of the workflow to be read only to all reviewers as its moving through the review process. The issue that I am having is that when I set the permissions on the attachment to Consumer for the reviewers, they are not able to add comments or edit an

Re: Task Model Permissions vs. Attachment Permissions

ronald_van_kuij — Tue, 12 Feb 2013 22:36:30 GMT

Isn't this more a question for an Alfresco forum?

Re: Task Model Permissions vs. Attachment Permissions

frederikherema1 — Wed, 13 Feb 2013 06:45:54 GMT

Is indeed more Alfresco-related. I will try to answer, nevertheless:

A task can only be edited by the person that is assigned OR by the process initiator. This has nothing to do with permissions on the models, more of a service/ui constraint. The content-model uses for tasks describes the task, however, the task is NOT an Alfresco-cm:content but just a task in activity, having no Alfresco ACL's capabilities.

A solution should be to:
- Create a multi-instance (as parallel-review) that has a task for EACH reviewer assigned to him/her explicit ally.
- Add a service-task before the tasks, setting READ_CONTENT permission to all selected assignees
- Add a end-task-listener to the review-task, that revokes (if needed) the READ_CONTENT permissions from the document again

Or am I getting your use case wrong?

Re: Task Model Permissions vs. Attachment Permissions

srobinson — Thu, 14 Feb 2013 06:13:47 GMT

Thanks for your input. It does help in the understanding of the integration. Sometimes it is difficult to know what things were put into place from an Alfresco end and what is Activiti.

My use case however would actually call for the assignee to have READ access on the attachment and edit access on the task. My process actually does something similar to what you have mentioned, but the task UI in Alfresco remains read-only following the access on the content. It does seem that there is something in the Alfresco UI that is preventing this and not anything that can be controlled in Activiti.

Thanks again for your response.

- Shannon