-
Bug Report
-
Resolution: Fixed
-
L3 - Default
-
None
-
None
Steps to reproduce:
1. deploy two process definitions (e.g. A and B)
2. start some instances of A and B (e.g. three instances of A and four instances of B)
3. grant an user a read permission to read one of the started process instances
4. query for process instances
Problem
On MySql the wrong result set will be returned, so that the user is able to see process instances he is not allowed to.
Expected Behavior
The user see only process instances he is allowed to see.
Hints
This does not happen if for example only process instances of A will be started.