marklogicworkflow
marklogicworkflow copied to clipboard
MBO Security: Have importer output flag up script users/roles when enabling process
The Script Task currently executes as the default CPF user. (Which is??? same as originating document???) There is a need to allow a process designer to specify who the script executes as.
This then raises an organisational (human) breech possibility. To minimise this, when enabling a process (which must be done by a workflow manager, not a workflow designer), flag to the designer what script tasks are contained and who then run as. This should be contained in the annotation in the root and sub process pipelines, and in the response to the REST API call for enabling the process. It should also be logged in the security log.