-
Bug Report
-
Resolution: Fixed
-
L3 - Default
-
None
Steps to reproduce:
- custom Identity Provider is implemented (storing user-groups membeship)
- user1 is in group1
- process1 has camunda:candidateStarterGroups="group1"
- I query for process definition with startebleBy=user1
Expected result:
process1 is returned
Current result:
process1 is not returned
Hint:
when executing the query we directly join with ACT_ID_MEMBERSHIP DB table instead of taking user-group membership from identity provider. See this line.
Reported on forum: https://forum.camunda.org/t/startableby-issue-when-canidate-starter-groups-is-set/8549
and https://forum.camunda.org/t/ability-to-query-for-all-process-def-that-current-user-can-start-based-on-startable-groups-prop-on-process-def/11779
This is the controller panel for Smart Panels app
[CAM-9286] Process definition query by startableBy with custom IdentityProvider is not working correctly
Description |
Original:
Steps to reproduce:
* custom Identity Provider is implemented (storing user-groups membeship) * user1 is in group1 * process1 has {{camunda:candidateStarterGroups="group1"}} * I query for process definition with {{startebleBy=user1}} Expected result: process1 is returned Current result: process1 is not returned Hint: when executing the query we directly join with {{ACT_ID_MEMBERSHIP}} DB table instead of taking user-group membership info from identity provider. See [this line|https://github.com/camunda/camunda-bpm-platform/blob/c57c013e65bdf0d8b0149a10ec2f2ccba22ed572/engine/src/main/resources/org/camunda/bpm/engine/impl/mapping/entity/ProcessDefinition.xml#L292]. Reported on forum: https://forum.camunda.org/t/startableby-issue-when-canidate-starter-groups-is-set/8549 |
New:
Steps to reproduce:
* custom Identity Provider is implemented (storing user-groups membeship) * user1 is in group1 * process1 has {{camunda:candidateStarterGroups="group1"}} * I query for process definition with {{startebleBy=user1}} Expected result: process1 is returned Current result: process1 is not returned Hint: when executing the query we directly join with {{ACT_ID_MEMBERSHIP}} DB table instead of taking user-group membership from identity provider. See [this line|https://github.com/camunda/camunda-bpm-platform/blob/c57c013e65bdf0d8b0149a10ec2f2ccba22ed572/engine/src/main/resources/org/camunda/bpm/engine/impl/mapping/entity/ProcessDefinition.xml#L292]. Reported on forum: https://forum.camunda.org/t/startableby-issue-when-canidate-starter-groups-is-set/8549 |
Workflow | Original: camunda BPM [ 52197 ] | New: Backup_camunda BPM [ 56534 ] |
Description |
Original:
Steps to reproduce:
* custom Identity Provider is implemented (storing user-groups membeship) * user1 is in group1 * process1 has {{camunda:candidateStarterGroups="group1"}} * I query for process definition with {{startebleBy=user1}} Expected result: process1 is returned Current result: process1 is not returned Hint: when executing the query we directly join with {{ACT_ID_MEMBERSHIP}} DB table instead of taking user-group membership from identity provider. See [this line|https://github.com/camunda/camunda-bpm-platform/blob/c57c013e65bdf0d8b0149a10ec2f2ccba22ed572/engine/src/main/resources/org/camunda/bpm/engine/impl/mapping/entity/ProcessDefinition.xml#L292]. Reported on forum: https://forum.camunda.org/t/startableby-issue-when-canidate-starter-groups-is-set/8549 |
New:
Steps to reproduce:
* custom Identity Provider is implemented (storing user-groups membeship) * user1 is in group1 * process1 has {{camunda:candidateStarterGroups="group1"}} * I query for process definition with {{startebleBy=user1}} Expected result: process1 is returned Current result: process1 is not returned Hint: when executing the query we directly join with {{ACT_ID_MEMBERSHIP}} DB table instead of taking user-group membership from identity provider. See [this line|https://github.com/camunda/camunda-bpm-platform/blob/c57c013e65bdf0d8b0149a10ec2f2ccba22ed572/engine/src/main/resources/org/camunda/bpm/engine/impl/mapping/entity/ProcessDefinition.xml#L292]. Reported on forum: https://forum.camunda.org/t/startableby-issue-when-canidate-starter-groups-is-set/8549 and https://forum.camunda.org/t/ability-to-query-for-all-process-def-that-current-user-can-start-based-on-startable-groups-prop-on-process-def/11779 |
Labels | New: identity-provider |
Link | New: This issue is related to SUPPORT-7408 [ SUPPORT-7408 ] |
Mentioned Roles |
Mentioned Groups |