Remark about package actions and rights.

[anweber]

Hi,

   Just a remark about a possible confusion between proposed actions and rights. 

   In the task model, we have the possibility to specify wich actions are proposed for the package as a all and for each item included in this package (see "package actions" section in http://wiki.alfresco.com/wiki/WorkflowAdministration).  It should be logic if you specify only actions on the composition of the package.  But there is the possibility to say "the user can only read the documents in the package".  Despite this "rule", the user can access to the document with the webClient and modify it if the associated rights allows him.  I think, it should be a better solution to infer authorised actions on documents from the rights associated to those documents.

        Thanks,

                  André

[davidc]

Task Dialog package actions control the UI available for each type of task.  Different kinds of tasks may require different kinds of actions to be applied to content and the package as a whole.

Permissions are also adhered to - so, if an update action is available in the task, but the user does not have update rights, they can't update.

I think it's better to be explicit about the list of actions that can be applied in a particular workflow context, rather than imply them from permissions.  The rest of the Web Client behaves this way.