Authorization Levels to Tasks

[fcauti]

Hello,

I have to define the access policy of my workflow where some tasks have to be editable by a group, only readable by another and hidden to the others.
So, I need not only the concept of assignee of tasks, that is normally read/write mode, but also the concept of viewer.

I do not find in the API how to specify these different levels of authorizations.
I can retrieve all tasks assigned to the group which I belong to, so it is ok for edit and step forward the process; but how to retrieve tasks that I have only to display?

I could retrieve all tasks of all other groups and display them harcoding all the policy restrictions in my application, but it would not be flexible nor clear for the high level users.
It would be great to have beside "assignee" and "candidate" also "viewer" in the Task properties.

Regards
Federico

[fcauti]

Maybe is there the possibility to add an IdentityLinkType? An then use it in TaskService.addGroupIdentityLink(..)

I guess I will have to extend some API classes

Regards
Federico

[jbarrez]

The link type is a string, so you can pass in whatever you want.
And you can always fetch the identity links for each tasks yourself.

[fcauti]

Thank you for the answer.
I will try using TaskService methods addGroupIdentityLink and getIdentityLinksForTask passing and retrieving custom strings.

I think this is a good test on framework flexibility (at least about this aspect)

Federico