Support Article
Workbasket assignment can be picked up by an unauthorised user
Summary
A case with an assignment that is completed by a student is present. The assignment is routed to the supervisor workbasket.
The user has no access to the basket (workbasket not defined in operator profile and different workgroup). The user has the PegaRules:User4 access role defined in the access group.
When the case is routed from the user to the workbasket, the confirmation harness must display a message indicating that the case is routed and picked up by another user. However, this does not occur on Pega 8.4.1 and student is able to pickup the work from the workbasket via the tasklist.
Error Messages
Not Applicable
Steps to Reproduce
- Create a flow with two assignments
- Ensure that the user has insufficient rights to pick up work from workbasket (PegaRules:User4). The last assignment is routed to the workbasket configured
- Run the flow
- Verify if the user with PegaRules:User4 role is able to pick up the work in the workbasket. However, the operator does not have access to the workbasket via the Operator rule or Workgroup rule
Root Cause
A defect in Pegasystems’ code or rules.
Resolution
This issue is addressed in the Pega 8.4.2 patch release.
Published July 28, 2020 - Updated December 2, 2021
Have a question? Get answers now.
Visit the Collaboration Center to ask questions, engage in discussions, share ideas, and help others.