Enforce Candidate Starter Restrictions on Process Definitions
Enforce Candidate Starter Restrictions on Process Definitions: a task in LegoFlow-SWE (Harbor dataset). Observed behavior Currently, any authenticated user can start a process instance, regardless of the activiti:candidateStarterUsers and activiti:candidateStarterGroups attributes defined in the…
The task
**Observed behavior** Currently, any authenticated user can start a process instance, regardless of the `activiti:candidateStarterUsers` and `activiti:candidateStarterGroups` attributes defined in the BPMN XML. The process runtime (`processRuntime.processDefinitions()` and `processRuntime.start(...)`) does not check…
Part of Lego-X/LegoFlow-SWE.