Task History Authorization

Hi all,

Is there a way to configure a read history authorization for a specific human task?

We tested with success the READ_HISTORY permission on resource type Process Definition (6) for specific groups, but we want to control it by task, ideally using the task definition key.

https://docs.camunda.org/manual/latest/user-guide/process-engine/authorization-service/

Hey @mac-git-79,

READ_HISTORY can be defined on Tasks as well, yes.
It does not seem to be documented, though.
Maybe you could file an issue for that in the Issue Tracker?

However, as far as I know, this only works with task IDs, not with task definition keys because they would not be unique across models.

Perhaps you could use a create task event listener to add the authorization as soon as the task is created? Haven’t tried it myself though.

Best,
Tobias

1 Like

Hi, this should work and here is a little help about authorization in listeners

Hope this helps.
Cheers,
Lukas