Hi Vinod, According to the Spec, Excluded owner should not be able to perform any operation or shouldn't see any task related information. We have a bug in simple query where in some cases it shows excluded tasks. We need to work on that (which is a big fix)
Problem is we are not showing any error msg in Web UI ( No visual feedback), when user click on a "Claim" button on a excluded task. You can see error in logs saying user is not authorized to perform task. Problem is we are not showing that error msg in UI. Thanks, Hasitha. Hasitha Aravinda, Senior Software Engineer, WSO2 Inc. Email: hasi...@wso2.com Mobile : +1 201 887 1971, +94 718 210 200 On Mon, Jun 8, 2015 at 12:02 PM, Vinod Kavinda <vi...@wso2.com> wrote: > Hi Hasitha, > Yes I did check the error message in management console. That particular > error is coming from a getInput() request. In the management UI it calls > both loadTask() and getInput() methods to show task info. But in the > webApp, we only use loadTask(). That is the reason for not having any > errors. > > I thought of adding role based authorisation to loadTask() method and > checked the spec. According to the spec any role is allowed for this > operation. > > Thanks, > Vinod > > On Mon, Jun 8, 2015 at 6:47 PM, Hasitha Aravinda <hasi...@wso2.com> wrote: > >> Hi Vinod, >> >> Even we show only SimpleQuery search result in HumanTask web app, there >> are some scenarios, where excluded owners task are shows under claimable >> task. This happens when task definition has complex users/roles >> definitions, because simple query can't search users in role using a DB >> query. >> >> In that case, problem is HumanTask Webapp doesn't show any error message >> in when you click on a task ID. If you check HumanTask UI in management >> console you will see this error msg. >> >> Hence Reopening this Jira. >> >> Thanks, >> Hasitha. >> >> >> Hasitha Aravinda, >> Senior Software Engineer, >> WSO2 Inc. >> Email: hasi...@wso2.com >> Mobile : +1 201 887 1971, +94 718 210 200 >> > > > > -- > Vinod Kavinda > Software Engineer, *WSO2, Inc <http://www.wso2.com>.* > Mobile : +94 (0) 712 415544 > vi...@wso2.com >
_______________________________________________ Dev mailing list Dev@wso2.org http://wso2.org/cgi-bin/mailman/listinfo/dev
