Support Article
Workbasket "Roles" security not honored
SA-9926
Summary
You have a Role configured for a workbasket, but you find that any user in the workgroup is able to perform assignments in the workbasket regardless of the role.
Error Messages
Not Applicable
Steps to Reproduce
1. Configure a workbasket with a role other othan than operator's role.
2. Create an assignment that routes to that workbasket.
3. Click on the assignment link and observe that you can open and work on that assignment.
Root Cause
You, as an application developer, created a Rule-Acess-Role-Obj (RARO) for User4 role in @baseclass and as a result provided full access to the users.
Resolution
Removing the RARO solves the issue.
Published June 12, 2015 - Updated October 8, 2020
Have a question? Get answers now.
Visit the Collaboration Center to ask questions, engage in discussions, share ideas, and help others.