Uploaded image for project: 'Camunda Optimize'
  1. Camunda Optimize
  2. OPT-2172

Denied authorization for READ_HISTORY on proc_def leads to error on dashboard

    XMLWordPrintable

    Details

    • Type: Bug Report
    • Status: Done
    • Priority: L3 - Default
    • Resolution: Fixed
    • Affects Version/s: 2.4.0
    • Fix Version/s: 2.5.0, 2.5.0-alpha1
    • Component/s: frontend
    • Labels:
      None

      Description

      • given:
        • Engine and Optimize are up, configured and running
        • I am an admin user and created a report for "invoice" process and place it on a dashboard.
        • I give user john permission for "READ_HISTORY" for all process definitions, but not for "invoice" process.
      • when:
        • I log-in with user john
        • I try to open the dashboard that admin has created with the report of which I am not allowed to see the content
      • then:
        • Optimize front crashes and I see "Cannot read property view of undefined"
      • expected:
        • john should be able to see the dashboard, but not the report / data of the report

      Hints: Also the whole report disappears from the report list for john.

        Attachments

          Activity

            People

            Assignee:
            Unassigned
            Reporter:
            felix.mueller Felix Müller
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: