Do not display the options of add/edit workflow for users that don't have permission to do it on Kaleo Forms Admin

• Type: Bug
• Status: Closed
• Resolution: Fixed
• Affects Version/s: 7.0.X, 7.1.X, 7.2.X, 7.3.X, Master
• Fix Version/s: 7.2.10 DXP FP14, 7.2.10.5 DXP SP5, 7.2.X, 7.3.X, 7.4.1 CE GA2, Master
• Component/s: Workflow
• Labels:
  • backend
  • backend_test
  • dxp-only
  • liferay-dxp-72-sp5
  • liferay-fixpack-dxp-14-7210
• Branch Version/s:
  7.3.x, 7.2.x
• Backported to Branch:
  Committed
• Fix Priority: 3
• Git Pull Request: https://github.com/liferay-workflow/liferay-portal/pull/392

 Description:

The options to add and edit workflow shouldn't be displayed for users that don't have permission to do it, on Kaleo Forms Admin.

  Steps to Reproduce:

1. Go to Control Panel > Users and Organizations and create a new user called 'Site Admin'
2. Go to Memberships and make 'Site Admin' a member of Liferay DXP, then go to Roles and assign the 'Site Administrator' site role
3. Sign out of Test/Test and sign in as 'Site Admin'
4. Navigate to Content & Data > Kaleo Forms Admin
5. Create a new process
   1. Add a name and click Next
   2. Choose any Field Set and click Next

 Expected Result:

The user is not able to see the Add Workflow button, nor the Edit option on the kebab menu for each item, since only regular administrators should see it.

 Actual Result:

The user is able to see the Add Workflow button and click on it; the user is able to see the edit option on the kebab menu for each item and click on it.

Ps.: None of the actions lead to an actual creation/change of workflows, but it can cause frustration for the users.

 

Verified on master DXP: bf41ac8d3aa2dbf64656fa7c0635882079d28f09