User task candidate group is not being used to show tasks

Camunda 8 Topics
1

Hi,

In Camunda admin → cluster → Groups → I have added a group here with the same name and groupId. Let’s call it “example-app-group”.

In the BPMN in user task I have given the Candidate groups value after enabling fx as:

[“example-app-group”]

Now when the process instance creates a user task, I expect the task to be visible only to users in this group. If the group does not exist then either throw error or not show the task to anyone.

But the task is being displayed to everyone and everyone is able to assign the task to themselves. How to fix it?

image
image1718×592 40.5 KB

2

Hi @firstpostcommenter
Do you have the “Enforce user task restrictions” option enabled?

image
image1278×422 16.8 KB

3

I don’t see such a setting either in 8.9 version or in 8.10-alpha5 version

4

That is strange, I see it in 8.9:

image
image1986×382 12.9 KB

5

In Camunda docs:

Tasklist V1 only

User task access restrictions are supported only by the Tasklist V1 API and are not available in Tasklist V2. 
From Camunda 8.8, Tasklist runs in V2 mode by default.

So For User/Human tasks, restricting the Tasklist task access to assigned/candidate users and groups is a feature that is available in the legacy Tasklist v1 and not in Tasklist v2 which uses authorization-based access control