AEM 6.2 Classic UI : Query regarding restricting groups from initiating workflows.

[cquser1]

Hi All,

We have a custom workflow which basically deals with the approvals.After workflow is initiated it is sent to various groups one after the other[for which we are using dynamic participant step]. Payload is the AEM page. Once a group gets task in inbox[http://localhost:4502/inbox.html] , they will make any changes to page content if required[by having a look at that AEM page in author] and approve the workflow and thereafter it goes to the next approval group and so on.

We have a requirement that the workflow should only be initiated by say "managers" group and other groups which are part of the approval flow in the workflow,should not be able to initiate this custom workflow on the AEM page. But once they get task in their inbox [http://localhost:4502/inbox.html], they should be able to approve/reject it.

Tried doing it via permissions model, tried multiple things, but no luck.

Any thoughts/pointers/reference code on this will be really helpful.

[Endoriel · Accepted solution]

This should work by restricting access to the specific workflow model for the user group that shouldn't be able to initiate the workflow (/etc/workflow/models/mycustomworkflow on AEM 6.2). This group should still have access to the /etc/workflow/instances to be able to see and complete steps in the workflow.

[cquser1]

Hi Endoriel,

Thanks a ton for your reply. On doing basic testing, seems to be working ok.

Will do some more testing and mark this answer as correct.

Thanks a lot again.

[smacdonald2008]

The above answer seems to be the correct way to proceed here.