How could I restrict the role to start a process?

[shiyusen]

Hi,

I'm new to jBPM. I'm playing the websale example. I changed the buyer swimlane to the following:
< swimlane name="buyer" >
< assignment expression="user(ernie)" />
< /swimlane>
and I deployed it.

It's seems the assignment does not work. I still can start a process without login as ernie.

Does I miss something on the configuration? Or should I write my own code to parse the permission?

Regards,

Shi Yusen/Beijing Langhua Ltd.

[kukeltje]

Currently you should indeed write your own code to prevent people starting a process they are not allowed to.

Ronald

[shiyusen]

Hi Ronald,

Thank you for your answer.