cancel
Showing results for 
Search instead for 
Did you mean: 

How to block workflow's initiator from editting tasks? (potencial bug)

upforsin
Star Collaborator
Star Collaborator

Hello,

I encountered really frightening bug in Alfresco share.

When I am starting a process, it is automatically assigned to another user.

I do not see this task, but when I open Workflow History, i can see current task and I can edit them! (by clicking on a pen icon).

I hope I am doing something wrong, because it seems to be a serious security flaw.

Regards,

Mike

PS. It is not only with my process. This flaw concerns also build-in workflows.

howkymike
Alfresco Developer
2 REPLIES 2

kintu_barot
Star Collaborator
Star Collaborator

These workflows are designed in that way only.

It is not a bug.

This feature is implemented by keeping the following case in mind.

For e.g. if you are the initiator of a workflow and the task is assigned to a user, suppose that he/she is not responding / not taking any action on the task then the initiator should be able to reassign or edit the task in order to finish it up.

However, you can design your custom workflow in a way that it does not allow the initiator to edit the tasks once he/she started the workflow.

I hope my explanation is good enough to help you.

Regards,

Kintu

ContCentric

Regards,
Kintu

upforsin
Star Collaborator
Star Collaborator

Ok, he should be able to resign, but why should he be able to decide for someone?

If you ask your boss for a pay rise and he does not answer, it does not mean you can increase your salary by yourself.

Anyway, do you know can I redesign my workflow to not allow the initiator to edit the tasks?

Regards,

Mike

howkymike
Alfresco Developer