Permissions for Variables and Attachments

[maxr24]

Hello,

We are trying to enhance our Activiti engine (v 5.19) to allow us to set custom fine-grained permissions for task variables and attachments. From what I can see so far, this is not supported out of the box.

Given you guys know the code base by heart, could you please comment on the difficulty of such an endeavor? More specifically, do you think this is something that is relatively plug-and-play or will it require significant rework of the infrastructure (aka change how VariableScope and Context work altogether).

Thanks,

Max

[trademak]

Hi,

With attachments I don't think you will have many issues, that should be fairly easy to do.
For process variables it's probably more difficult. What kind of process variables are you thinking of? Do you want to be able to query on these process variables? Why do you need them to be stored as process variable in Activiti in other words.

Best regards,