Uploaded image for project: 'Red Hat Process Automation Manager'
  1. Red Hat Process Automation Manager
  2. RHPAM-1362

Create better response for user without permissions to do REST Forward task operation

    XMLWordPrintable

Details

    • Enhancement
    • Resolution: Done
    • Minor
    • 7.1.0.GA
    • 7.0.1.GA
    • Kie-Server
    • None

    • Kie Server

    Description

      When user without permission to the task try to forward it. He gets response code from Kie Server 404 Not Found and message "Could not find task instance with id "1"".
      In Kie Server log is warning message

      WARN  [org.jbpm.services.task.persistence.TaskTransactionInterceptor] (default task-50) Could not commit session: org.jbpm.services.task.exception.PermissionDeniedException: User '[UserImpl:'1637c1a7-414a-4c75-a4b4-ad206962511a']' does not have permissions to execute operation 'Forward' on task id 1

      You can see the whole stacktrace in attached file.

      REST cmd

      curl -X PUT -H 'Accept: application/xml' -H 'Authorization: Basic eW9kYTp1c2V0aGVmb3JjZTEyM0A=' -i 'http://a1b8-kieserver.project.openshiftdomain/services/rest/server/containers/cont-id/tasks/1/states/forwarded?targetUser=9459a244-c20a-4e45-90f9-d7cb52a8dc21'

      Checks if user is allowed to forward task is handl by method isAllow in class MVELLifeCycleManager

      Expected HTTP code for the user without the permissions should be 403 Forbidden. Also the message in REST response should be changed.

      Attachments

        Issue Links

          is cloned by

          Enhancement - An enhancement to or refactoring of existing functionality that is not configurable by an end user (typically a change made by an internal team that affects users) JBPM-7542 Create better response for user without permissions to do REST Forward task operation

          • Minor - To be worked after urgent, high, and medium priorities are resolved. This term is chosen when the severity of the issue is low, or the complexity or effort to correct it may be higher, relatively speaking. For low priority issues, known workarounds exist or are not needed due to the trivial effort needed to address the issue.
          • Resolved

          Activity

            People

              mcivantos_jira María Civantos (Inactive)
              jakubschwan Jakub Schwan
              Marian Macik Marian Macik
              Marian Macik Marian Macik
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: