Denied authorization for READ_HISTORY on proc_def leads to error on dashboard

XMLWordPrintable

    • Type: Bug Report
    • Resolution: Fixed
    • Priority: L3 - Default
    • 2.5.0-alpha1, 2.5.0
    • Affects Version/s: 2.4.0
    • Component/s: frontend
    • None

      • given:
        • Engine and Optimize are up, configured and running
        • I am an admin user and created a report for "invoice" process and place it on a dashboard.
        • I give user john permission for "READ_HISTORY" for all process definitions, but not for "invoice" process.
      • when:
        • I log-in with user john
        • I try to open the dashboard that admin has created with the report of which I am not allowed to see the content
      • then:
        • Optimize front crashes and I see "Cannot read property view of undefined"
      • expected:
        • john should be able to see the dashboard, but not the report / data of the report

      Hints: Also the whole report disappears from the report list for john.

        This is the controller panel for Smart Panels app

          1. demo-user-dashboard.png
            157 kB
            Felix Mueller
          2. john-user-dashboard.png
            74 kB
            Felix Mueller

              Assignee:
              Unassigned
              Reporter:
              Felix Mueller
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: