-
Bug Report
-
Resolution: Fixed
-
L3 - Default
-
None
The Javadoc regarding authorization exceptions appears incorrect for many operations on job definitions, such as suspendJobDefinitionById, activateJobDefinitionById, etc.
Example:
* @throws AuthorizationException * If the user has no {@link Permissions#UPDATE} permission on {@link Resources#PROCESS_INSTANCE} * or no {@link Permissions#UPDATE_INSTANCE} permission on {@link Resources#PROCESS_DEFINITION}. * * @see #suspendJobById(String) * @see #suspendJobByJobDefinitionId(String) */ void suspendJobDefinitionById(String jobDefinitionId);
If I am not mistaken, the required authorization is UPDATE on PROCESS_DEFINITION; only in case the cascade option is used, the authorizations mentioned in the snippet need to be granted.