-
Feature Request
-
Resolution: Fixed
-
L3 - Default
-
None
-
None
In order to create batch operation following permissions are checked:
- CREATE permission on Batch resource
or
for the corresponding batch operation:- CREATE_BATCH_MIGRATE_PROCESS_INSTANCES permission on Batch resource
- CREATE_BATCH_MODIFY_PROCESS_INSTANCES permission on Batch resource
- CREATE_BATCH_RESTART_PROCESS_INSTANCES permission on Batch resource
- CREATE_BATCH_DELETE_RUNNING_PROCESS_INSTANCES permission on Batch resource
- CREATE_BATCH_DELETE_FINISHED_PROCESS_INSTANCES permission on Batch resource
- CREATE_BATCH_DELETE_DECISION_INSTANCES permission on Batch resource
- CREATE_BATCH_SET_JOB_RETRIES permission on Batch resource
- CREATE_BATCH_SET_EXTERNAL_TASK_RETRIES permission on Batch resource
- CREATE_BATCH_UPDATE_PROCESS_INSTANCES_SUSPEND permission on Batch resource
Note: Do not forget we have two different type of modification: batch of asynchronous modification of single instance and multiple instances modification.
Document the new permissions: https://docs.camunda.org/manual/7.10/user-guide/process-engine/authorization-service/#permissions-by-resource