Not able to modify 'Assign To' field on a certification task with itil role
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎01-10-2022 07:15 AM
Hello - so I am thinking this is by design and need to confirm.
I have a user that belongs to a group with just the 'itil' role, which contains the 'certification' role. If I spin up a data certification instance that generate a certification task record (TSK record) the user gets it, is able to certify the CIs, but not able to assign the TSK record to himself; that is, the 'Assigned to' and 'Short Description' fields are read only.
Of course, users with 'certification_admin' role can re-assign as they please but they can also do other things as well (like configure certifications) which we would want to control.
I mean, you would think that if I am a member of a group that receives a task and I want to assume ownership of said task, I can just assign it to myself.
- Labels:
-
compliance
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎01-10-2022 07:33 AM
The logged-in user must match with assigned to modify
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎01-10-2022 07:40 AM
I don't get it. When the task is created all of the fields are greyed. Where do I need to go to modify / check this?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎01-10-2022 07:50 AM
Ignore my first response it's related to the "Follow on task" table records
To modify "Certificate task" records Assigned To and Short description user must have "certification_admin" role and also record state should be in "work in progress"
You can check ACL(s) on the Certification task table
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎01-10-2022 07:57 AM
That's the point. If I grant users 'certification_admin' they will have the ability to modify those fields, but they will also be able to modify other things in certification that management may not want to grant access to. Like modify certifications.
Not ideal.