Uploaded image for project: 'JBoss BPMS Platform'
  1. JBoss BPMS Platform
  2. RHBPMS-3883

User with "Create workspaces" permission can't see the workspaces he created.

    XMLWordPrintable

Details

    • Feature Request
    • Resolution: Done
    • Major
    • 6.0.0
    • 6.0.0
    • BAM
    • None
    • DR4
    • +
    • 0
    • 0% 0%
    • Hide
      Cause: Lack of permissions for the user/role who creates a brand new workspace.

      Consequence: The user can't get access to the workspace just after creating it.

      Fix: Auto-assign permissions the the creator user within the create workspace operation.

      Result: The user can access/admin the workspace he creates.
      Show
      Cause: Lack of permissions for the user/role who creates a brand new workspace. Consequence: The user can't get access to the workspace just after creating it. Fix: Auto-assign permissions the the creator user within the create workspace operation. Result: The user can access/admin the workspace he creates.

    Description

      Description of problem:
      User with "Create workspaces" permission can't see/use/edit the workspaces he created. Because when the workspace is created it has initially no permissions assigned (it is visible only to root user, who bypases all the application level permission checking).

      Version-Release number of selected component (if applicable):
      6.0.0.DR3

      How reproducible:
      Always.

      Steps to Reproduce:
      1. Login with root and assign "Create workspaces" permission to Administrator role.
      -In the black management bar at the top click "General congifuration"
      -Expand section "General permissions"
      -In "Permission assignation" table set "Create workspace" permission for Administrator role to Yes, the other permissions 3 to No, click Save
      2. Logout root and log back in with some user with Administrator role (e.g. admin)
      3. In the black management bar at the top click picture with label "Create workspace", that takes you to page with "Workspaces" panel.
      4. Fill in name and title (e.g. MyNewWorkspace for both) and click "Create workspace" button.

      Actual results:
      The message "The workspace has been successfully created" appears. However, the newly created workspace is not visible to the admin user, so he can't do anything to configure the newly created workspace!

      • With admin user, the newly created workspace is nowhere to be seen (in "Workspaces" tree in General configuration, nor on the home page of the dashboard-builder in the "Workspaces" select)
      • When you login with root user, the workspace "MyNewWorkspace" created by admin user is visible and working.

      The problem is in the initial privileges assigned to workspace - go to "General configuration" page > Workspaces > MyNewWorkspace > Permission you can see, that workspace is created with no permissions assigned to any role.

      Expected results:
      The workspace should be visible at least to the user, who has permission to create it. The initial privileges of a newly created workspace should be set at least to "Access" and "Administrate" granted to the role, that created it.
      Otherwise what is the use of "Create workspaces" privilege, when the workspaces cannot be worked with (except for root user, who is not restricted by any permissions)?

      Additional info:

      Attachments

        Activity

          People

            david.magallanes David Gutierrez
            jhrcek Jan Hrcek (Inactive)
            Jan Hrcek Jan Hrcek (Inactive)
            Jan Hrcek Jan Hrcek (Inactive)
            Cheng Zhang (Inactive), Rajesh Rajasekaran
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Time Tracking

                Estimated:
                Original Estimate - 1 day
                1d
                Remaining:
                0m
                Logged:
                Time Not Required
                Not Specified