Configurable elements

This page provides an overview of the configurable elements within Access Control in Valtimo.

In Access Control, policies can be defined for specific elements to manage user access and permissions precisely. These policies can be tailored with conditions, allowing for detailed and customized access configurations.

Each configurable element offers a set of actions that can be adjusted to fit your access needs. While not all actions are available for every element, each element provides a relevant subset of actions that logically apply to its function, ensuring that your access settings are both efficient and meaningful.

Actions configurable with Access control

Action	Function	Examples
Assign	Gives permission to assign that element to someone	Case or Task
Assignable	Makes users selectable when the element is assigned	Case or Task
Create	Enables users to create that element	Case or Case note
Claim	Enables users to claim the element	Case or Task
Delete	Enables users to delete the element	Case or Case note
Modify	Enables users to modify the elements details	Case or Case note
View	Gives permission to view the elements details	Case or Task
View-list	Gives permission to view the element in a list	Case, Task, Case note

Please note that it is not possible to nest actions in a configuration. For each separate action a configuration needs to be added to Access Control for that specific action.

Incorrect configuration:

{
    "resourceType": "com.ritense.case.domain.CaseTab",
    "action": "view, create, modify",
    "conditions": []
}

Correct configuration:

{
    "resourceType": "com.ritense.case.domain.CaseTab",
    "action": "view",
    "conditions": []
},
{
    "resourceType": "com.ritense.case.domain.CaseTab",
    "action": "create",
    "conditions": []
},
{
    "resourceType": "com.ritense.case.domain.CaseTab",
    "action": "modify",
    "conditions": []
}

Elements configurable with Access control

Below the full list of elements within Valtimo that can and need to be configured in Access Control. Per element a list of configurable actions is documented and an example of the configuration is added. The available actions per element define what can be configured for that element.

Case Tab

Configure access to view custom Case Tabs.

{
    "resourceType": "com.ritense.case.domain.CaseTab",
    "action": "view",
    "conditions": []
}

Configurable actions: "view"

Case Note

Configure access to view custom Case Notes.

{
    "resourceType": "com.ritense.note.domain.Note",
    "action": "view",
    "conditions": []
}

Configurable actions: "create", "delete, "modify", "view-list"

Case Document

Configure access to the JSON document that is created for each Case.

{
    "resourceType": "com.ritense.document.domain.impl.JsonSchemaDocument",
    "action": "view",
    "conditions": []
}

Configurable actions: "assign", "assignable", "create", "claim", "delete, "modify", "view", "view-list"

Case Document Snapshot

Configure access to the JSON document snapshots that are created for a Case.

{
    "resourceType": "com.ritense.document.domain.impl.snapshot.JsonSchemaDocumentSnapshot",
    "action": "view",
    "conditions": []
}

Configurable actions: "view", "view-list"

Case Document Definition

Configure access to the document definition (JSON Schema) of a Case.

{
    "resourceType": "com.ritense.document.domain.impl.JsonSchemaDocumentDefinition",
    "action": "view",
    "conditions": []
}

Configurable actions: "assign", "assignable", "create", "claim", "delete, "modify", "view", "view-list"

Case Search Fields

Configure access to the configured search fields for a Case.

{
    "resourceType": "com.ritense.document.domain.impl.searchfield.SearchField",
    "action": "view_list",
    "conditions": []
}

Configurable actions: "view-list"

Process Execution

Configure access to be able to start and execute processes.

{
    "resourceType": "com.ritense.valtimo.camunda.domain.CamundaExecution",
    "action": "create",
    "conditions": []
}

Configurable actions: "create"

Process Tasks

Configure access to be able to work with process user tasks.

{
    "resourceType": "com.ritense.valtimo.camunda.domain.CamundaTask",
    "action": "create",
    "conditions": []
}

Configurable actions: "assign", "assignable", "create", "claim", "view", "view-list"