Activiti REST and permissions

[r3dge]

Hi,

With activiti explorer i have created a new user called "r3dge", member of the group "cpe". Then i have sent a REST request with the user "r3dge" :

GET http://localhost:8080/activiti-rest/service/runtime/tasks

In the response body i found all tasks pending for all groups and not only task assigned to group my user is taking part.

Does that means that there are no permissions applied in the REST API ?

Thanks

[trademak]

Hi,

By default there are no permissions applied to the Activiti REST API. With Spring Security there's the opportunity to implement your own permission scheme when necessary.

Best regards,

[r3dge]

thank you for your answer