Roles in Workbasket
Accepted Solution
Goldman Sachs Group Inc
IN
Hi Sudha,
In which ever operator you are testing the use case, what are the roles available?
If there are any Access of role to Object for the roles for "@baseClass. Kindly remove those instance.
NOTE : Do not change the values in that AROR. Delete those records.
For example: Current user belongs to ABC Access Group with A,B and C roles. user belongs to Default@ABC work queue which has default@ABC work basket. default@ABC work basket has role E mentioned. So if current user tries to access a assignment from the default@ABC work basket your expectations is that it should not allow user to see that assignment as he does not have the role E.
It will allow if any of the A,B or C roles has AROR for @baseClass with complete access.
In Records Explorer, Security>Access of Role to Object. In the instances see if (Access name:A or B or C has Access Class:@baseClass) if there are AROR for any/All of three, delete that AROR instance [Donot edit the values in it, delete the record]
Hope this helps you resolve the issue.
Regards,
Priyabharathi
Pegasystems Inc.
FR
Same as in here: https://community1.pega.com/community/pega-product-support/question/restrict-workbasket-particular-users
TechMahindra
JP
Accepted Solution
Goldman Sachs Group Inc
IN
Hi Sudha,
In which ever operator you are testing the use case, what are the roles available?
If there are any Access of role to Object for the roles for "@baseClass. Kindly remove those instance.
NOTE : Do not change the values in that AROR. Delete those records.
For example: Current user belongs to ABC Access Group with A,B and C roles. user belongs to Default@ABC work queue which has default@ABC work basket. default@ABC work basket has role E mentioned. So if current user tries to access a assignment from the default@ABC work basket your expectations is that it should not allow user to see that assignment as he does not have the role E.
It will allow if any of the A,B or C roles has AROR for @baseClass with complete access.
In Records Explorer, Security>Access of Role to Object. In the instances see if (Access name:A or B or C has Access Class:@baseClass) if there are AROR for any/All of three, delete that AROR instance [Donot edit the values in it, delete the record]
Hope this helps you resolve the issue.
Regards,
Priyabharathi