Users with View permissions on a process can't View?

rated by 0 users
Not Answered This post has 0 verified answers | 7 Replies | 3 Followers

Top 150 Contributor
40 Posts
Points 112
sbrown@huntoil.com posted on Tue, Jul 3 2012 2:23 PM

I have a group of users who need to be able to view a process at any point in the process.  I thought I could accomplish this by granting those users the "View" permission on the process.  However when I do the following, I still get exceptions:

using (Connection wfConn = new Connection())
{
    wfConn.Open(myConnectionString);
    ProcessInstance pi = wfConn.OpenProcessInstance(processId);
}

The exceptions I get are:

28018 K2:domain\user does not have permissions to open the process

This is an ASP.NET web application.  Impersonation is working correctly.  Is their some other way I should be getting at the process data to show these users?

  • | Post Points: 5

All Replies

Top 25 Contributor
232 Posts
Points 929

I beleive your requirement is to show the viewflow of a workflow instance, if so "view" permission are sufficient. Why are you trying to open the instance? Have you tried to launch the viewflow using those group of users's login credentials

The statements and opinions made in my postings are my own, and do not reflect the opinions of SourceCode Technology Holdings, Inc. or its subsidiaries. All information is provided as is with no warranties, express or implied, and grants no rights or licenses.

  • | Post Points: 4
Top 150 Contributor
40 Posts
Points 112

No, that is not the requirement.  I need to be able to open a process and get to the process data to show it on an aspx web page.  Ordinarily I would do this by opening a work list item, however, this group of users may not have any actions in a process, but they still need visibility into the process.

Further, I do not believe your statement about view flow and permissions is accurate.  In my experience, anyone can access the SilverLight view flow, even if they don't have any permissions on a process.  However, that is a secondary point to this thread.

  • | Post Points: 1
Top 25 Contributor
232 Posts
Points 929

Did you explicitly add the "user" to the process rights section? sometimes adding an AD group will not work because the group membership is resolved at regular intervals (default 8hrs). This is based on Identity Service

The statements and opinions made in my postings are my own, and do not reflect the opinions of SourceCode Technology Holdings, Inc. or its subsidiaries. All information is provided as is with no warranties, express or implied, and grants no rights or licenses.

  • | Post Points: 4
Top 150 Contributor
40 Posts
Points 112

Tried that as well, but no luck.

  • | Post Points: 4
Top 25 Contributor
232 Posts
Points 929

double check if you have the right process instance id. may be the process has completed or in error state.

Does the code work executing as one of the destination user?

The statements and opinions made in my postings are my own, and do not reflect the opinions of SourceCode Technology Holdings, Inc. or its subsidiaries. All information is provided as is with no warranties, express or implied, and grants no rights or licenses.

  • | Post Points: 1
Not Ranked
1 Posts
Points 4

Hi, 

Just wondering if you managed to solve this problem.

 

I'm currently having the same issue. 

  • | Post Points: 4
Top 10 Contributor
486 Posts
Points 1,461
dc replied on Wed, Sep 5 2012 9:06 AM

The code used to open the process instance in this case requires one to have Admin permissions on the process as it also allows updating the datafield values and more (doing GoTo's for example). As such, giving all Admin permissions is typically not something I would recommend.

 

If you only intend to show data with no intended updates, I would go for the reporting SmartObjects. These allow one to view all the data whilst enforcing view permissions (and not Admin permissions). For example, the SmartObject called "Process Data" under the Workflow Reports --> Workflow General category allows just that, while just needing the process instance ID.

  • | Post Points: 1
Page 1 of 1 (8 items) | RSS