L3 - Default User Story (Required on creation):
I can assign permissions of the resource BATCH to users who should be able to view/update/delete a specific batch or all batches. If interacting with secondary resources of the batch (job definitions, jobs), no permissions are currently enforced. This should be changed to be consistent with jobs that belong to process instances.
Functional Requirements (Required before implementation):
- The relevant permissions on the BATCH resource are enforced for any jobs (see, monitor, execution) and job definitions belonging to that batch
Technical Requirements (Required before implementation):
Limitations of Scope (Optional):
Hints (Optional):
- This may require adding a dedicated BATCH_ID reference to the corresponding tables, as it is otherwise fairly hard to figure out in isolation the batch a job or job definition belongs to