rest api POST without authentication?

[glazachev]

Environment:
. activiti 5.13
. tomcat 7.0.42
. java 1.6.0_22-b04

Steps:
. invoking GET /service/runtime/process-instances with bad user name -> {"errorMessage":"Unauthorized","statusCode":401}
. invoking POST /service/runtime/process-instances with bad user name -> started process instance

Question:
. rest POST query authenticated?

I am trying to find my local error, but it seems all ok.

[trademak]

Thanks for posting this issue, you are right. The authentication check was not invoked for the process instance POST request. I've just fixed it.

Best regards,