Complex Permissions
I have workflow that has three steps. User A is in group 1 and completes step 1. User B is in group 2 and complete step 2. User C completes step 3. User C must be
either in group 1 (but should not be User A)
OR
in group 3.
Does frevvo support NOT operators on the user field? Does it support defining both multiple role(s) and user(s) that can access a step/form?
-
You can assign a step to multiple roles. The Role List in activity properties is multi-select. But you cannot assign a step to multiple individual users or even a user and a role. The user property does not support a NOT operation either. It accepts only a single username.
As a work-around, when the flow reaches step3, you can check if the currently logged in user is the same as the user who performed step1. If yes, then hide all form fields and display a message saying he does not have the permission to perform that task.
You can use Business Rules to record the currently logged in users for step1 and step3. Then compare those usernames in step3 (again using a rule). If the users match, hide (set invisible property to true for) all your form fields in step3 and display a message for that user saying he cannot perform the step because he performed step1 and ask him to unlock the task so that someone else from that role can perform it. Good to move all your form fields inside one section so that you can hide that section to hide all fields in step3.
0 -
Thank you for the workaround.
0
Please sign in to leave a comment.
Comments
2 comments