[CAM-11954] In Webapps, historic instance permission check is missing - camunda JIRA

Type: Bug Report
Resolution: Fixed
Priority: L3 - Default
Fix Version/s: 7.14.0, 7.13.1, 7.14.0-alpha1
Affects Version/s: 7.13.0, 7.14.0
Component/s: webapp
Labels:
None

Steps to reproduce

Enable historic instance permissions
Grant only read permission to the process definition and a specific historic process instance
Go to ...
- history definition view and check the historic process instance tab
- history instance view and check historic incident tab or historic called instances tab

Expected behavior

On definition view, the historic process instance with granted read permission is shown
On instance view, the related historic incidents & historic called instances are shown

Observed behavior

The tabs remain empty.

Hint
The auth check is missing for the private Webapp REST API

This is the controller panel for Smart Panels app

There are no comments yet on this issue.

Assignee:: Unassigned

Reporter:: Tassilo Weidner

Votes:: 0 Vote for this issue

Watchers:: 0 Start watching this issue

Created:: 25/May/20 4:46 PM

Updated:: 02/Jul/20 3:12 PM

Resolved:: 04/Jun/20 5:52 PM