SmartObject execute rights for Process_XML

  • 7 February 2013
  • 2 replies
  • 1 view

Badge +13

SELECT xmlname, xmlvalue FROM Process_XML.List WHERE XMLName IN ('XYZ') AND ProcessInstanceID = 553


How come it requires the user to have Admin or View rights for the above query to return information, even when that user is assigned as destination?


Using 4.6.2


2 replies

Badge +8

I believe the Reporting SmartObjects always apply the process permissions as set in Management Console, so View Participate should help you there. Is there a reason why you are using the Reporting SmartObjects instead of accessing the XML from the runtime API? I am guessing that this is part of the Worklist Item page, if not, let us know your requirements.

Badge +13

To allow the user to access the read-only form.

 

It seems the reporting SmartObject is not checking for the members of the destination to a Role.

 

It's missing this check:

 

K2Consolidated.Server.destqueue.Name = K2Consolidated.ServerLog.Worklist.Destination  INNER JOIN

ON K2Consolidated.Server.destqueueuser.queueid = K2Consolidated.Server.destqueue.id

Reply