mirror of
https://github.com/Alfresco/alfresco-community-repo.git
synced 2025-08-07 17:49:17 +00:00
Merged HEAD-BUG-FIX (5.1/Cloud) to HEAD (5.1/Cloud)
96472: Merged 5.0.N (5.0.2) to HEAD-BUG-FIX (5.1/Cloud) 96359: Merged V4.2-BUG-FIX (4.2.5) to 5.0.N (5.0.2) 96305: MNT-13212: Merged DEV to V4.2-BUG-FIX (4.2.5) 96032: MNT-13212: Details of tasks assigned to any user are visible to all users via API call - Restore workflow permission check in interceptor for getAssignedTasks and getPooledTasks methods. Add unit test. git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@96501 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
This commit is contained in:
@@ -1,5 +1,5 @@
|
|||||||
/*
|
/*
|
||||||
* Copyright (C) 2005-2013 Alfresco Software Limited.
|
* Copyright (C) 2005-2015 Alfresco Software Limited.
|
||||||
*
|
*
|
||||||
* This file is part of Alfresco
|
* This file is part of Alfresco
|
||||||
*
|
*
|
||||||
@@ -105,8 +105,7 @@ public class WorkflowPermissionInterceptor implements MethodInterceptor
|
|||||||
|
|
||||||
}
|
}
|
||||||
|
|
||||||
// Not including getAssignedTasks and getPooledTasks, as the methods themselves already take into account the authenticated user/group
|
if (methodName.equals("getAssignedTasks") || methodName.equals("getPooledTasks") || methodName.equals("getTasksForWorkflowPath") || methodName.equals("getStartTasks") || methodName.equals("queryTasks"))
|
||||||
if (methodName.equals("getTasksForWorkflowPath") || methodName.equals("getStartTasks") || methodName.equals("queryTasks"))
|
|
||||||
{
|
{
|
||||||
Object result = invocation.proceed();
|
Object result = invocation.proceed();
|
||||||
List<WorkflowTask> rawList = (List<WorkflowTask>) result;
|
List<WorkflowTask> rawList = (List<WorkflowTask>) result;
|
||||||
|
Reference in New Issue
Block a user