Permissions

User roles loaded during login are mapped to permissions in EximeeDashboard.

Available permissions

The following summary presents the available Eximee Dashboard permissions.

• feature_browse_all_tasks - Allows the user to browse all tasks in the system,

• feature_show_user_task_details - Allows the user to view task details,

• feature_show_process_details_tab - Allows the user to display the process details tab,

• feature_process_list - Allows browsing the list of cases,

• feature_change_assignee - Allows the user to (change assignment) release a task if it can be picked up after being released,

• feature_process_start - Allows the user to start a process and see the "Start case" option in the eximee-dashboard sidebar,

• feature_show_process_overview_tab- Allows the user to display the process overview,

• feature_change_process_priority - Allows modifying the case priority,

• feature_change_assignee_to_another_user - Allows the user to change assigned users for tasks,

• feature_browse_process_history - Allows the user to browse the case history,

• feature_export_task_list - Allows exporting the task list (only for the list in legacy mode),

• feature_verify_client - Allows displaying the client verification tab using the mID with the mObywatel application,

• feature_resign_process - Allows the user to invoke process resignation actions,

• feature_browse_notes - Allows browsing notes.

• feature_add_notes - Allows adding notes.

• feature_delete_notes - Allows deleting notes.

• feature_modify_notes - Allows modifying notes

• feature_config_edit - Allows modifying business application configurations in Eximee Dashboard.

Permissions configuration

Permissions for a role are configured in the settings of the LAN package.

This is done using the parameter

AUTH_ROLE_MAPPING

and its value is the comma-separated permissions for individual roles.

Role1:permission,Role1:otherPermission,Role2:permission

Group configuration for User Tasks

For a user with a given role to be able to take a given User Task from the task list in Eximee Dashboard), that role must be defined in the field candidateGroups. The value of this field is a comma-separated list containing the names of roles, that are to be authorized to take the task. This can be done in the process editor in Eximee Designer by clicking the tile of interest User Task -> User assignment.

Role permissions for case types

To provide a user with a specific role with the appropriate case types, i.e. processes created based on process definitions, you must configure the mapping of roles to processes (i.e. to process definition names).

To do this we configure the parameter

PROCESS_DEFINITION_KEY_MAPPING

providing a comma-separated list

Role1:Process1,Role2:Process1,Role3:Process2

For an application (task) to be visible in Eximee Dashboard it is sufficient to set the appropriate value in candidateGroups.

For a process to be visible in the cases list, you must set the appropriate mapping of the user's role in PROCESS_DEFINITION_KEY_MAPPING . You must also map the role feature_process_list to user roles in the AUTH_ROLE_MAPPING parameter