Security Roles in Taskana

Taskana distinguishes between five different roles:

• USER
  The USER role grants access to Taskana. USER is everybody who gets assigned to and completes tasks. 
• TASK_ADMIN
  The TASK_ADMIN role includes all permissions on tasks with the exception of deleting a task/tasks. It can also READ all workbaskets in case to create/transfer tasks in/to them.
• BUSINESS_ADMINISTRATOR
  The BUSINESS_ADMINISTRATOR role allows to change the business configuration (workbaskets, classifications, ...)
• ADMINISTRATOR
  The ADMINISTRATOR role includes all permissions on the system.
• MONITOR
  The MONITOR role grants access to all monitoring operations and to the monitoring UI.

Since Taskana is based on JAAS, it provides a basic role mapping for Principals to roles. This is configured in the TaskanaEngineConfiguration. You can assign a list of Principal names to each role. Taskana will check if one of the user principals is contained in the required role.