topic Re: Process Initiation Authorization in Alfresco Forum

Process Initiation Authorization

AmirElsaeed — Mon, 17 Aug 2020 07:59:52 GMT

Hello,

i want to restrict users from starting new process instance.

i tried following example :

https://www.activiti.org/userguide/#security

but it didn't work.

i also used eclipse to set candidate groups but it didn't work too.

what i am trying to do is add identity link at ACT_RU_IDENTITYLINK table related to PROC_DEF_ID_ on deploying without using REST or API.

it should get candidate from bpmn xml itself.

sorry for bad english and i am new to activiti .

regards

Re: Process Initiation Authorization

EddieMay — Mon, 17 Aug 2020 09:30:55 GMT

Hi @AmirElsaeed & welcome to Alfresco!

Can you outline the exact steps that you took & also what didn't work - was there any output to screen or in the logs to say what hasn't worked, for example?

Thanks,

Re: Process Initiation Authorization

AmirElsaeed — Mon, 17 Aug 2020 10:15:54 GMT

1- i opened actitivi-app

2- draw bpm process

3- exported bpm.xml file

4- update it with the following

5- import the file again.

nothing happen (still any user can start process instance although user is not in that group).

---

same with eclipse

although i set candidate starter and imported xml to actitivi app still any one can start process instance.

another thing is this table "ACT_RU_IDENTITYLINK" somehow related with process Initiation Authorization?

if yes how to add record with PROC_DEF_ID_ and candidate

Re: Process Initiation Authorization

pujamandlapure — Wed, 11 Jan 2023 18:57:19 GMT

Hi Activiti team,

I am also getting same issue , is it a bug in v5.22. Even if we mention the starter candidates all candidates can start the process.

<formalExpression>user(username)</formalExpression>

</resourceAssignmentExpression>

</activitiotentialStarter>

</extensionElements>

This needs to be fixed as any user should not start any process , that will be a wrong feature.Please suggest solution.