search

tsgrp / HPI

OpenContent Management Suite (OCMS)
http://www.tsgrp.com/products
17 stars 5 forks source link

OC Create Workflow Snapshot Assumes No Deleted Users/Groups - Breaking Workflow Task Fetch #2401

Open abrown45 opened 3 years ago

abrown45 commented 3 years ago

Issue

ActivitiUtil#createWorkflowSnapshotInstance assumes an assigned user exists in the database while this may not always be the case. Assuming a workflow task is assigned to a user or group that is then removed from the database through LDAP or other processes. This would result in a task that does have an assignee but querying for that user/group would return no results. A fix is needed to unassign the task if it is assigned to a deleted user/group or do not process those results.

Replicating

  1. Create local user
  2. Assign to workflow user
  3. Delete local user
  4. Confirm workflow reporting dashlet snapshot fetch is broken