From 34b24b7d07f74dbfe6ce00268647d79dbecfdc09 Mon Sep 17 00:00:00 2001 From: Alan Davis Date: Sat, 7 Feb 2015 10:32:43 +0000 Subject: [PATCH] Merged HEAD-BUG-FIX (5.1/Cloud) to HEAD (5.1/Cloud) 96472: Merged 5.0.N (5.0.2) to HEAD-BUG-FIX (5.1/Cloud) 96359: Merged V4.2-BUG-FIX (4.2.5) to 5.0.N (5.0.2) 96305: MNT-13212: Merged DEV to V4.2-BUG-FIX (4.2.5) 96032: MNT-13212: Details of tasks assigned to any user are visible to all users via API call - Restore workflow permission check in interceptor for getAssignedTasks and getPooledTasks methods. Add unit test. git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@96501 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261 --- .../service/cmr/workflow/WorkflowPermissionInterceptor.java | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/source/java/org/alfresco/service/cmr/workflow/WorkflowPermissionInterceptor.java b/source/java/org/alfresco/service/cmr/workflow/WorkflowPermissionInterceptor.java index 16187fe17d..4d85c75a05 100644 --- a/source/java/org/alfresco/service/cmr/workflow/WorkflowPermissionInterceptor.java +++ b/source/java/org/alfresco/service/cmr/workflow/WorkflowPermissionInterceptor.java @@ -1,5 +1,5 @@ /* - * Copyright (C) 2005-2013 Alfresco Software Limited. + * Copyright (C) 2005-2015 Alfresco Software Limited. * * This file is part of Alfresco * @@ -105,8 +105,7 @@ public class WorkflowPermissionInterceptor implements MethodInterceptor } - // Not including getAssignedTasks and getPooledTasks, as the methods themselves already take into account the authenticated user/group - if (methodName.equals("getTasksForWorkflowPath") || methodName.equals("getStartTasks") || methodName.equals("queryTasks")) + if (methodName.equals("getAssignedTasks") || methodName.equals("getPooledTasks") || methodName.equals("getTasksForWorkflowPath") || methodName.equals("getStartTasks") || methodName.equals("queryTasks")) { Object result = invocation.proceed(); List rawList = (List) result;