Skip to content

Restrict Case Retention Policy Configuration to Admin Users#8763

Merged
sanjacornelius merged 1 commit intoepic/FOUR-29101from
observation/FOUR-30263
Mar 31, 2026
Merged

Restrict Case Retention Policy Configuration to Admin Users#8763
sanjacornelius merged 1 commit intoepic/FOUR-29101from
observation/FOUR-30263

Conversation

@sanjacornelius
Copy link
Copy Markdown
Contributor

@sanjacornelius sanjacornelius commented Mar 31, 2026

This PR restricts visibility of the Case Retention Policy configuration within Process Configuration to admin users only.

Solution

  • Added a conditional check to verify the authenticated user has admin permissions before displaying the Case Retention Policy section

How to Test

  1. Log in as a non-admin user
  2. Navigate to the Process Configuration screen
  3. Ensure the Case Retention Policy section is not visible

Related Tickets & Packages

ci:deploy

Code Review Checklist

  • I have pulled this code locally and tested it on my instance, along with any associated packages.
  • This code adheres to ProcessMaker Coding Guidelines.
  • This code includes a unit test or an E2E test that tests its functionality, or is covered by an existing test.
  • This solution fixes the bug reported in the original ticket.
  • This solution does not alter the expected output of a component in a way that would break existing Processes.
  • This solution does not implement any breaking changes that would invalidate documentation or cause existing Processes to fail.
  • This solution has been tested with enterprise packages that rely on its functionality and does not introduce bugs in those packages.
  • This code does not duplicate functionality that already exists in the framework or in ProcessMaker.
  • This ticket conforms to the PRD associated with this part of ProcessMaker.

Update process edit view to only display the case retention policy card when the feature is enabled and the current user is an administrator. The Blade conditional in resources/views/processes/edit.blade.php now requires both config('app.case_retention_policy_enabled') and auth()->user()->is_administrator to prevent non-admins from seeing the retention settings.
@processmaker-sonarqube
Copy link
Copy Markdown

Quality Gate passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarQube

@Kookster310
Copy link
Copy Markdown
Contributor

QA server K8S was successfully deployed https://ci-29fd755012.engk8s.processmaker.net

@sanjacornelius sanjacornelius merged commit 112608c into epic/FOUR-29101 Mar 31, 2026
9 of 13 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants