in ddm-bpm-security/src/it/java/com/epam/digital/data/platform/bpms/security/AuthorizationFilterIT.java [82:115]
public void shouldReadOnlyPermittedTasks() throws IOException {
ProcessDefinitionDto[] processDefinitionDtos = getForObject("api/process-definition",
ProcessDefinitionDto[].class);
ProcessDefinitionDto processDefinition = Stream.of(processDefinitionDtos)
.filter(pd -> "testInitSystemVariablesProcess_key".equals(pd.getKey())).findFirst().get();
//testuser
ProcessInstanceDto testUserProcessInstance = postForObject(
"api/process-definition/" + processDefinition.getId() + "/start", "{}",
ProcessInstanceDto.class);
//testuser2
String testuser2Token = new String(ByteStreams
.toByteArray(BaseIT.class.getResourceAsStream("/json/testuser2AccessToken.json")));
ProcessInstanceDto testUser2ProcessInstance = postForObject(
"api/process-definition/" + processDefinition.getId() + "/start", "{}",
ProcessInstanceDto.class);
TaskDto[] testuserTasks = getForObject(
String.format("api/task?processInstanceId=%s", testUserProcessInstance.getId()),
TaskDto[].class);
assertThat(testuserTasks).isNotEmpty();
Stream.of(testuserTasks).forEach(historyTask -> {
assertThat(historyTask.getAssignee()).isEqualTo("testuser");
});
TaskDto[] testuser2Tasks = getForObject(
String.format("api/task?processInstanceId=%s", testUser2ProcessInstance.getId()),
TaskDto[].class, testuser2Token);
assertThat(testuserTasks).isNotEmpty();
Stream.of(testuser2Tasks).forEach(historyTask -> {
assertThat(historyTask.getAssignee()).isEqualTo("testuser2");
});
}