[case_delete] permission missing in 2022.1

Q&A
1

In Bonita Studio Community Edition 2022.1-u0 , [case_delete] permission is missing event for Administrator Profile.

It's not possible to delete a case, the following error appears in log when I try to delete a Case from REST API or from Bonita Administrator Application (bonita/apps/adminAppBonita/admin-case-list/):

2022-06-08T07:29:25,076+0200 | thp051 | DEBUG | [http-nio-8098-exec-6|93] o.b.e.a.PermissionServiceImpl - THREAD_ID=93 | HOSTNAME=thp051 | TENANT_ID=1 | Unauthorized access to DELETE bpm/case/2 attempted by rdj, required permissions: [case_delete]

It works only with "install" User!!

I've try to add in tomcat/setup/platform_conf/initial/tenant_template_portal/custom-permissions-mapping.properties without success:

profile|User=[case_delete]
profile|Administrator=[case_delete]

How can I add [case_delete] permission to Administrator Profile in Bonita Studio?

Best regards

2

Hi,

There is a regression in 2022.1 with the Admin case list page permissions.
Here is a workaround:

  1. Go to the bonita admin application, export the ressource “Bonita Admin Case List”.
  2. Open the zip without unzip it. Modify the page.properties and add “, DELETE|bpm/case” to the list of the ressources.
  3. Change also the name and the displayName.
  4. In the bonita admin application in ressource page, click on the “install” button.
  5. Select the modified zip file and update the ressource.
  6. Go to the application page
  7. Click on the three dots button for the “Bonita Administrator Application”
  8. Delete “admin-case-list”
  9. Click on add page
  10. Select the previously installed page
  11. Put “admin-case-list” for the url field
  12. Delete “Case” under BPM in navigation space
  13. Click on add under Navigation
  14. In name input, put “Case” and in page input select the page that you just add.
  15. Logout and login and then the deletion of a case will be possible.

HTH
Romain

3

Workaround added.