Custom security provider is not restricting users to Groups.

Normal
0




false
false
false

EN-US
X-NONE
X-NONE






































































































































































In workflows, we have destinations set to groups which users are members
of. Unfortunately, the system does not seem to be filtering by the logged in
user’s group. When viewing the ManagedGroups property of
SourceCode.Workflow.Client.Connection.User, all possible groups are present
rather than just the groups to which the user belongs. I suspect this is the
reason why the worklist is not being filtered and all users have all possible
work list items visible. IRoleProvider methods of our security provider appear
to be working as intended. That is, when FindGroups is called with a username the appropriate number of groups is returned, and when FindUsers is called with a group name the appropriate number of users is returned.



What needs to be done to ensure that the worklist filters properly based on the
group(s) of the currently logged in (or impersonated) user? Is this a special property in the Properties dictionary of IGroup or IUser?