Uploaded image for project: 'JBoss BPMS Platform'
  1. JBoss BPMS Platform
  2. RHBPMS-3950

Analyst can Build&Deploy projects

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • Major
    • 6.1.0
    • 6.0.3
    • Documentation

    Description

      Description of problem:

      In BPMS 6.0.1, a user with an 'analyst' role can Build&Deploy projects ("Build & Deploy" in Project Editor) even though the "Deployments" menu is properly hidden to the user.

      'analyst' permission isn't clearly defined but according to the following docs, 'analyst' should not be able to build&deploy (or at least deploy) projects, I guess.

      Official docs:
      https://access.redhat.com/site/documentation/en-US/Red_Hat_JBoss_BPM_Suite/6.0/html-single/Administration_And_Configuration_Guide/index.html#Access_control2

      analyst: creates and designs processes and forms and instantiates the processes. This role is the similar to a developer, without access to asset repository and deployments.

      Community docs:
      http://docs.jboss.org/drools/release/6.0.1.Final/drools-docs/html/wb.Workbench.html#wb.Configuration

      Analyst is a weaker version of developer and does not have access to the asset repository or the ability to deploy projects.

      web.xml in BPMS business-central.war:

      Analyst - Responsible for creating and designing processes
      into the system. Creates process flows and handles
      process change requests. Needs to test processes that
      they create. Also creates forms and dashboards.

      Steps to Reproduce:
      1. Create a user with a role 'analyst'
      2. Log in to business-central
      3. Go to [Project Authoring] and Build&Deploy a project ("Build & Deploy" in Project Editor)

      Actual results:

      • The user can build a project (and the artifact is deployed to Artifact repository and its process shows up in "Process Definitions")

      Expected results:

      • The user cannot build a project

      Attachments

        Activity

          People

            rhn-support-vigoyal Vikram Goyal (Inactive)
            rhn-support-tkobayas Toshiya Kobayashi
            Jiří Locker Jiří Locker
            Vikram Goyal Vikram Goyal (Inactive)
            Jiří Locker Jiří Locker
            brms-docs brms-docs (Inactive), Jiří Locker, Kris Verlaenen
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: