In Bonita Studio Community Edition 2022.1-u0 , [case_delete] permission is missing event for Administrator Profile.
It's not possible to delete a case, the following error appears in log when I try to delete a Case from REST API or from Bonita Administrator Application (bonita/apps/adminAppBonita/admin-case-list/):
2022-06-08T07:29:25,076+0200 | thp051 | DEBUG | [http-nio-8098-exec-6|93] o.b.e.a.PermissionServiceImpl - THREAD_ID=93 | HOSTNAME=thp051 | TENANT_ID=1 | Unauthorized access to DELETE bpm/case/2 attempted by rdj, required permissions: [case_delete]
It works only with "install" User!!
I've try to add in tomcat/setup/platform_conf/initial/tenant_template_portal/custom-permissions-mapping.properties without success:
profile|User=[case_delete]
profile|Administrator=[case_delete]
How can I add [case_delete] permission to Administrator Profile in Bonita Studio?
Best regards
Hi,
There is a regression in 2022.1 with the Admin case list page permissions.
Here is a workaround:
- Go to the bonita admin application, export the ressource “Bonita Admin Case List”.
- Open the zip without unzip it. Modify the page.properties and add “, DELETE|bpm/case” to the list of the ressources.
- Change also the name and the displayName.
- In the bonita admin application in ressource page, click on the “install” button.
- Select the modified zip file and update the ressource.
- Go to the application page
- Click on the three dots button for the “Bonita Administrator Application”
- Delete “admin-case-list”
- Click on add page
- Select the previously installed page
- Put “admin-case-list” for the url field
- Delete “Case” under BPM in navigation space
- Click on add under Navigation
- In name input, put “Case” and in page input select the page that you just add.
- Logout and login and then the deletion of a case will be possible.
HTH
Romain