Uploaded image for project: 'camunda BPM'
  1. camunda BPM
  2. CAM-3756

Authorization statement does not work on MySql

    XMLWordPrintable

Details

    • Bug Report
    • Resolution: Fixed
    • L3 - Default
    • 7.3.0, 7.3.0-alpha3
    • None
    • engine
    • None

    Description

      Steps to reproduce:
      1. deploy two process definitions (e.g. A and B)
      2. start some instances of A and B (e.g. three instances of A and four instances of B)
      3. grant an user a read permission to read one of the started process instances
      4. query for process instances

      Problem
      On MySql the wrong result set will be returned, so that the user is able to see process instances he is not allowed to.

      Expected Behavior
      The user see only process instances he is allowed to see.

      Hints
      This does not happen if for example only process instances of A will be started.

      mgm-controller-panel

        This is the controller panel for Smart Panels app

        Attachments

          Activity

            People

              sebastian.menski Sebastian Menski
              roman.smirnov Roman Smirnov
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Salesforce