Process Manager Granular Permissions

[marcoAntonioNina]

Issue & Reproduction Steps

As a Process Manager, I want to be able to reassign tasks, create custom inbox rules, and oversee all tasks assigned across my team without requiring Admin permissions or being assigned to any task in the process.

Solution

• An IsManager middleware has been created to verify that the user is a manager and thus be able to review the endpoints that are needed to view the Process I Manage listing when a user does not have administrator permissions.

Note
With this middleware, user permissions are dynamically modified, and the permissions needed by the endpoints that are previously listed in the cache are placed so that validation continues, and after executing the request, that permission is removed.

How to Test

Check the list Process I Manage and it should work correctly without giving permission errors on the endpoints.

Related Tickets & Packages

• FOUR-26776

Code Review Checklist

• I have pulled this code locally and tested it on my instance, along with any associated packages.
• This code adheres to ProcessMaker Coding Guidelines.
• This code includes a unit test or an E2E test that tests its functionality, or is covered by an existing test.
• This solution fixes the bug reported in the original ticket.
• This solution does not alter the expected output of a component in a way that would break existing Processes.
• This solution does not implement any breaking changes that would invalidate documentation or cause existing Processes to fail.
• This solution has been tested with enterprise packages that rely on its functionality and does not introduce bugs in those packages.
• This code does not duplicate functionality that already exists in the framework or in ProcessMaker.
• This ticket conforms to the PRD associated with this part of ProcessMaker.

ci:package-savedsearch:task/FOUR-26776
[FOUR-26776]: https://processmaker.atlassian.net/browse/FOUR-26776?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ

[cursor]

You have run out of free Bugbot PR reviews for this billing cycle. This will reset on October 21.

To receive reviews on all of your PRs, visit the Cursor dashboard to activate Pro and start your 14-day free trial.

[processmaker-sonarqube]

Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarQube