Uploaded image for project: 'camunda BPM'
  1. camunda BPM
  2. CAM-12455

User not able to access batch operation menu

    XMLWordPrintable

Details

    • Bug Report
    • Resolution: Fixed
    • L3 - Default
    • 7.14.0, 7.14.0-alpha4
    • 7.14.0, 7.14.0-alpha3
    • None
    • None

    Description

      Steps to reproduce

      1. Create a new user and provide him full access through admin for 'Application', 'Authorizations' & 'Batch'
      2. Login with the user into Cockpit and access 'Batch Operation'

      Expected outcome:

      A user should be able to see the batch operation menu. Seems to be a license check issue as shown in the logs

      Observed behavior

      The loading spinner is displayed and the user cannot see the batch operation menu

      Root cause

      • The React part of Cockpit uses the endpoint /camunda/api/admin/plugin/license/default/key to perform the license check. This requires Admin permissions.
      • See the affected code on GitHub [1]

      Solutions

      1. Add endpoint that only returns the information if a valid license is available and make it accessible for all users without granting a specific permission
      2. Remove admin permission check from license key endpoint (this might expose sensitive information: customerId, invalidMessage, licenseProvided, unlimited, valid, validUntil)

      [1] https://github.com/camunda/camunda-bpm-webapp/blob/master/ui/cockpit/src/modules/components/EnterpriseComponent/EnterpriseComponent.js#L27-L32

      mgm-controller-panel

        This is the controller panel for Smart Panels app

        Attachments

          Issue Links

            Activity

              People

                michael.schoettes Michael Schoettes
                hariharan.parasuraman Hariharan Parasuraman
                Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                  Created:
                  Updated:
                  Resolved:

                  Salesforce