hiding the task toolbar (reassign task, save changes, etc.)

RE: hiding the task toolbar (reassign task, save changes, etc.)

sikhivahans — Fri, 07 Apr 2017 11:53:52 GMT

tanmayareddyn241 We have come across this issue today.

Reassign Task in 'Task Smart Services' reassigns a task with all possible privileges. This isn't a candidate for a solution.

'Reassign with privileges' is the one that could help you here as this sets the privileges during the reassignment. But this does not block all privileges and still, the user can 'Reject' the task in this case.
Underlying API:
setPrivilege() in Assignment.Assignee which actually sets the privilege on the task(based on the constants in Assignment) has only 3 configurable privileges available namely Reject, Reassign within the assignees pool, Reassign to anyone and there isn't a constant that blocks all privileges. (I think we can try by getting the privilege(using getPrivilege()) value of a task that has no privileges at all and use the same value in setprivilege() while setting the privileges)

Let me know if you need an alternate and complete solution which will block the privileges on a task in any given case.

RE: hiding the task toolbar (reassign task, save changes, etc.)

tanmayareddyn241 — Tue, 11 Oct 2016 17:01:40 GMT

@Matthew How would we use this method if we are using "Task Smart Services" plugin to reassign task from a report. Our end goal is remove all privileges from users, they should not be able to reassign task to anyone not even initial pool of assignees.

RE: hiding the task toolbar (reassign task, save changes, etc.)

Matthew Kornfield — Thu, 06 Oct 2016 02:26:28 GMT

Makes a lot of sense. If the plugin doesnt work, creating a subprocess to handle the logic could mitigate the rework, but there would indeed still be some.

RE: hiding the task toolbar (reassign task, save changes, etc.)

peterh — Thu, 06 Oct 2016 01:20:58 GMT

Gotchya thanks Matthew. We're going to pursue the plugin because we are looking to reassign tasks across many process models and don't want to edit each model.

RE: hiding the task toolbar (reassign task, save changes, etc.)

Matthew Kornfield — Thu, 06 Oct 2016 00:37:22 GMT

Just make a variable (type user or even type text) that is the assignee, pv!assignee. Have the task "submit" (i.e. flow out) and then be assigned again to the pv!assignee, but at the outflow, have an XOR check for reassignment, and then that XOR should direct to a script task or something to designate the new assignee as the value of pv!assignee.

I made a small visual below. The key is that the process variable (pv!assignee) is the same assignee, but the contents have changed (user A to user B). Let me know if you still have questions.

RE: hiding the task toolbar (reassign task, save changes, etc.)

peterh — Thu, 06 Oct 2016 00:17:23 GMT

Matthew we're looking at using the Reassign with Privileges plugin to solve Erick's problem. But I'm also interested in your second option. How do we pass in the assignee as a as a variable who's privileges are always unable to reassign? Isn't the point of the issue that the new assignee inherits the elevated privileges of the current assignee? So it doesn't matter what the new assignee's privileges are. Unless you're suggesting that we run the smart service as a user who doesn't have privileges?

RE: hiding the task toolbar (reassign task, save changes, etc.)

garym — Wed, 05 Oct 2016 17:44:53 GMT

For the re-assignment privileges that are set on a task node, I don't want a user with Viewer permissions
on the process model to be able to see the "Reassign Task" option on the left sidebar.
So, I'm thinking of setting the privilege to "No privilege". However, I do see that there is an option
called "Only can reject the task". If I go with "No privilege", am I right in assuming that
they just won't be able to see the "Reject Task" option on the left sidebar but they can reject
the task if I have a Reject button on my form?

RE: hiding the task toolbar (reassign task, save changes, etc.)

Matthew Kornfield — Tue, 20 Sep 2016 18:50:47 GMT

Yes @Akshar is on the spot, I would build a small process that uses a sail form that gives a user picker and chains into that shared component smart node, with the node set to block reassignment privileges for the reassignee.

Alternatively you could complete the task through some means (Complete Task Smart Service or plugins) and then assign the task again, with the assignee passed in as a variable (pv!assignee) whose privileges are always unable to reassign.

So either plugin smart node or a process to do reassignment by a PV whose assignment privileges are blocked should work.

RE: hiding the task toolbar (reassign task, save changes, etc.)

aksharc — Tue, 20 Sep 2016 11:48:42 GMT

@erickp: There is a shared component - Reassign With Privileges (https://forum.appian.com/suite/tempo/records/item/lMBCLGOdlMUpdGVqW3dQaIKmclBmvvNEj8vu_cjb7T-5YiPr4Fu8ly5Yj1s09uenE4RYzA8zKyx7eiUh-6kLnMcXo9FU-alJG0gT-1uYNQdKll1Sw/view/summary)

With this you can set the privilege level of the reassigned user/group.

I hope this helps.

RE: hiding the task toolbar (reassign task, save changes, etc.)

erickp — Tue, 20 Sep 2016 04:16:28 GMT

Matthew, I like your answer because I think that is what is happening to me. How can I prevent for this? If a task is reassigned to a user that was not in the pool of assignees, I don't want this user to be able to reassign.

RE: hiding the task toolbar (reassign task, save changes, etc.)

Matthew Kornfield — Tue, 20 Sep 2016 00:25:03 GMT

I think it is also the case that when a task is reassigned to a user that was not currently in the pool of assignees, they get the default reassignment privileges set, which are to be able to reassign to any user. Reassignment will be restricted if that person was in the assignee pool to begin with, but by using an Admin user you could add them to the assignees list and they are therefore getting the default reassignment privileges.

RE: hiding the task toolbar (reassign task, save changes, etc.)

Shyam Bommakanti — Tue, 20 Sep 2016 00:00:09 GMT

Some more info on task reassignment: Process managers and above can still reassign the tasks in the process.

forum.appian.com/.../Configuring_Process_Security.html

RE: hiding the task toolbar (reassign task, save changes, etc.)

Jacob Cohen - Project Leader - Macedon Technologies — Mon, 19 Sep 2016 23:12:31 GMT

Erick, try setting your task reassignment privileges, as Ashley mentions above. Admin users should still be able to see the "Reassign Task" link, but regular users will not.

RE: hiding the task toolbar (reassign task, save changes, etc.)

erickp — Mon, 19 Sep 2016 23:07:49 GMT

Ashley thanks for the reply but we are already limiting the reassignment to admin users. However, because of the Appian defect, when an admin user reassigns to a non-admin user that doesn't have the necessary privileges, that user is able to see the Reassign Task link on the left toolbar. How can I prevent this from happening? (We have a task report where we also give the users the ability to reassign and in this report, the non-admin users CANT reassign) The only problem is that they are able to reassign with the out-of-the-box Appian functionality.

RE: hiding the task toolbar (reassign task, save changes, etc.)

Ashley Butler — Mon, 19 Sep 2016 23:05:08 GMT

can be reassigned to any Appian user*

RE: hiding the task toolbar (reassign task, save changes, etc.)

Ashley Butler — Mon, 19 Sep 2016 23:04:29 GMT

Task reassignment is handled in the process model >user input task> assignment tab. There's a link where you can limit the privileges. By default, the task can be assigned to any Appian user. Start forms do not allow for task reassignment. forum.appian.com/.../Assignment_Tab.html