Task Access through APIs

[vivekmakoday]

Hi,
I am working on Enterprise edition of Alfresco Activiti BPM and i wanted to check a few things with respect to task visibility for users.

1. If i have a user "User1" who is part of Org group "A" and if i have another Org group "B". If i have assigned a task to Org Group B, Will "User1" be able to see the tasks through Activiti Engine REST API as listed in the below section of dev guide

https://docs.alfresco.com/activiti/docs/dev-guide/1.4.0/#_task_list

2. Will the user be able to perform task update on the task assigned to Group B through Rest APIs as given in the below section

https://docs.alfresco.com/activiti/docs/dev-guide/1.4.0/#_task_actions

Appreciate help in advance.

Thanks,
Viv

[hari]

Hi Vivek,

If the user is part of group B also then he can claim and complete else he won't.

[vivekmakoday]

Thanks Hari. I understand he cannot do it using the UI unless user is part of group B. But just wanted to confirm if the user can do it through the Alfresco BPM API or not.

[jbarrez]

No, the user needs to have access to the task to do anything with it. The user can't access tasks from another group.
(There might be a way via admins … not sure. But regular users for sure not).