Process Auto-Start Triggering even when resource shouldn't have access

Products

• Clarity PPM On Premise

Issue/Introduction

We have a process that auto-starts on the submission of Time Sheets, and are trying to restrict access to the process to only a specific subset of users for the initial rollout.

The issue we're running into is that users who shouldn't have access to start the process (even those who are ONLY in the basic group for user access) are triggering the process on timesheet submission.

As far as we can tell, there are no instance rights for this process granted to anyone outside of our admin security group. Is there another place that might be allowing these instances to trigger?

Environment

Release : 15.9

Component : CA PPM BUSINESS PROCESS MANAGEMENT

Resolution

When user only have Process - AutoStart - All it allows user to only trigger processes with auto start. When user has Process - Start - All, it allows resource to start a new process instance from any of the process definitions in the system irrespective of auto start or on demand.