How can I deny to start process via API?

Submitted by lkazartsev on Fri, 04/29/2022 - 17:37

Hello everyone.

I have an issue.

Is there any possibilaties to deny start process via API if user isn't an actor initiator group?

User can't star process from Bonita User Application, but API alow me to start it via ../API/bpm/process//instantiation

Is there any way to fix it?

#actor

#user

#restapi #authorization

Log in or register to post comments
685 reads

Comments

Submitted by Dibyajit.Roy on Sat, 04/30/2022 - 10:15

Hello
Use Custom Javascript to decide if User is allowed or not.
Return true or false.
Disable the Submit Button based on Javascript.

Regards

Permalink

Submitted by lkazartsev on Fri, 05/06/2022 - 11:32

thanks for your response. But user still have possibilities to run process directly.. for examle via Postman or browser. Is there any opportunities to deny it on bonita engine. Maybe in Enterprise Version?

thanks in advance

Permalink

No answers yet.