Workflow security and the enable_workitem_mgmt key

In the content server documentation it's mentioned that the enable_workitem_mgmt key controls workflow security and that with

[SERVER_STARTUP]...enable_workitem_mgmt = T...

in the Content Server's server.ini file any user would be able to acquire a workitem.

Nevertheless I've set this configuration, restarted the content server, and still get the DM_WORKFLOW_E_NO_ACCESS when acquiring a workitem with a user that is not the performer (or supervisor, or sysadmin/superuser).

I've red in some tickets that enable_workitem_mgmt controls the ability to delegate and there isn't much more documentation about the particular flag. Has anyone used this configuration successfully, that is, with the intended results?

Find more posts tagged with

Comments

DCTM_Guru

Did you enable delegation option in the workflow activity definition?

mszurap

Hi Claudio,

Does your user have at least relate permission on your dm_process object?

We used this setting with Work Queues: in that situation any "work queue manager" should be able to acquire a workitem even if he/she is not part of the workflow (is not participant/performer). So it should work...

CláudioGil

I didn't want to activate delegation as users should not be able to delegate workitems.I'm not working with work queues either. Just trying to use this "worklfow security" to allow managers to complete tasks from subordinates.

Nevertheless I'm not sure if users have the relate permission on the process. I believe they have since the process is started from the user like a quickflow. I'll get back to you after I check this.

CláudioGil

Now that I've checked the process has the "BPM User Default ACL". So dm_world gains "relate" on the process. Does this feature work only if we are using work queues?