Merged HEAD-BUG-FIX (5.1/Cloud) to HEAD (5.1/Cloud)

96472: Merged 5.0.N (5.0.2) to HEAD-BUG-FIX (5.1/Cloud)
      96359: Merged V4.2-BUG-FIX (4.2.5) to 5.0.N (5.0.2)
         96305: MNT-13212: Merged DEV to V4.2-BUG-FIX (4.2.5)
            96032: MNT-13212: Details of tasks assigned to any user are visible to all users via API call
               - Restore workflow permission check in interceptor for getAssignedTasks and getPooledTasks methods. Add unit test.


git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@96501 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
This commit is contained in:
Alan Davis
2015-02-07 10:32:43 +00:00
parent bc748b7f22
commit 34b24b7d07

View File

@@ -1,5 +1,5 @@
/* /*
* Copyright (C) 2005-2013 Alfresco Software Limited. * Copyright (C) 2005-2015 Alfresco Software Limited.
* *
* This file is part of Alfresco * This file is part of Alfresco
* *
@@ -105,8 +105,7 @@ public class WorkflowPermissionInterceptor implements MethodInterceptor
} }
// Not including getAssignedTasks and getPooledTasks, as the methods themselves already take into account the authenticated user/group if (methodName.equals("getAssignedTasks") || methodName.equals("getPooledTasks") || methodName.equals("getTasksForWorkflowPath") || methodName.equals("getStartTasks") || methodName.equals("queryTasks"))
if (methodName.equals("getTasksForWorkflowPath") || methodName.equals("getStartTasks") || methodName.equals("queryTasks"))
{ {
Object result = invocation.proceed(); Object result = invocation.proceed();
List<WorkflowTask> rawList = (List<WorkflowTask>) result; List<WorkflowTask> rawList = (List<WorkflowTask>) result;