Hide process engines the user doesn't belong to

XMLWordPrintable

    • Type: Feature Request
    • Resolution: Unresolved
    • Priority: L3 - Default
    • None
    • Affects Version/s: None
    • Component/s: backend, frontend
    • 4

      Please describe the missing functionality

      Provide an authorization check before displaying process engine import status based on a ReadOnlyIdentityProvider

      What problem would the feature solve?

      Multi-tenant customers (especially OEM) have end users that should be strictly separated from each other. For example, if 10 different customers all had process engines and shared an Optimize instance, they could see a list of the other customers.

      This is a privacy issue, as these customers have not consented to publicly sharing their relationship with the OEM.

      Hint

      • Filter engines based on access

        1. engine-example.png
          4 kB
          Eric Lundberg
        2. config-option.png
          114 kB
          Eric Lundberg
        3. Screenshot 2022-03-10 at 14.38.30.png
          61 kB
          Joshua Windels

            Assignee:
            Unassigned
            Reporter:
            Eric Lundberg
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated: