Administrator Profile is required to access /API/bpm/task and /API/bpm/timerEventTrigger

Q&A
1

I try to access Tasks and Eventrigger from a standard User but I receive HTTP 403

I Use:

http://localhost:8098/bonita/API/bpm/timerEventTrigger?caseId=3&p=0&c=1

and

http://localhost:8098/bonita/API/bpm/archivedTask?p=0&c=999&f=caseId=1220

 

I have to set the user as Administrator to be able to get those informations!

 

How can I get Tasks and EventTriggers with a non Administartor User?

 

2

I've found that the problem comes from the default "Bonita User Application"

I dont want to let this Application to my Users, so I delete it from "Administrator Application" but after that its no more possible to get eventTrigger and archivedTasks for non Admin Users.

I have add the page userCaseDetailsBonita as orphean page with case-details as Token in my Application and it works!

It seems this page is required but not loaded witĥout the default "Bonita User Application"

 

3

I've had similar problems.

As for a workaround... I modified the Application Directory Page and hidden the default "Bonita User Application". I've hidden it too from the App selection directory in the Layout.

Hope it helps.