Complex Permissions

Comments

2 comments

  • Avatar
    Prajakta

    You can assign a step to multiple roles. The Role List in activity properties is multi-select. But you cannot assign a step to multiple individual users or even a user and a role. The user property does not support a NOT operation either. It accepts only a single username.

     

    As a work-around, when the flow reaches step3, you can check if the currently logged in user is the same as the user who performed step1. If yes, then hide all form fields and display a message saying he does not have the permission to perform that task. 

    You can use Business Rules to record the currently logged in users for step1 and step3. Then compare those usernames in step3 (again using a rule). If the users match, hide (set invisible property to true for) all your form fields in step3 and display a message for that user saying he cannot perform the step because he performed step1 and ask him to unlock the task so that someone else from that role can perform it. Good to move all your form fields inside one section so that you can hide that section to hide all fields in step3.

     

     

    0
    Comment actions Permalink
  • Avatar
    James Johnson

    Thank you for the workaround.

    0
    Comment actions Permalink

Please sign in to leave a comment.