This is an automated email from the ASF dual-hosted git repository.

mweiler pushed a commit to branch main
in repository 
https://gitbox.apache.org/repos/asf/incubator-kie-kogito-runtimes.git


The following commit(s) were added to refs/heads/main by this push:
     new 5d44329c83 [NO_ISSUE] Avoid NPE if no user is provided to fetch task 
transitions (#4066)
5d44329c83 is described below

commit 5d44329c83336d8d90e05e3fe243ba98b15d18cf
Author: Martin Weiler <[email protected]>
AuthorDate: Fri Oct 3 08:04:27 2025 -0600

    [NO_ISSUE] Avoid NPE if no user is provided to fetch task transitions 
(#4066)
---
 .../main/java/org/kie/kogito/usertask/impl/UserTaskServiceImpl.java   | 2 +-
 .../kie/kogito/usertask/impl/lifecycle/DefaultUserTaskLifeCycle.java  | 4 ++++
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git 
a/jbpm/jbpm-usertask/src/main/java/org/kie/kogito/usertask/impl/UserTaskServiceImpl.java
 
b/jbpm/jbpm-usertask/src/main/java/org/kie/kogito/usertask/impl/UserTaskServiceImpl.java
index f2148e5d63..a3d1beafbc 100644
--- 
a/jbpm/jbpm-usertask/src/main/java/org/kie/kogito/usertask/impl/UserTaskServiceImpl.java
+++ 
b/jbpm/jbpm-usertask/src/main/java/org/kie/kogito/usertask/impl/UserTaskServiceImpl.java
@@ -93,7 +93,7 @@ public class UserTaskServiceImpl implements UserTaskService {
     @Override
     public List<UserTaskTransitionView> allowedTransitions(String taskId, 
IdentityProvider identity) {
         Optional<UserTaskInstance> userTaskInstance = 
application.get(UserTasks.class).instances().findById(taskId);
-        if (userTaskInstance.isEmpty()) {
+        if (userTaskInstance.isEmpty() || identity.getName() == null) {
             return Collections.emptyList();
         }
         UserTaskInstance ut = userTaskInstance.get();
diff --git 
a/jbpm/jbpm-usertask/src/main/java/org/kie/kogito/usertask/impl/lifecycle/DefaultUserTaskLifeCycle.java
 
b/jbpm/jbpm-usertask/src/main/java/org/kie/kogito/usertask/impl/lifecycle/DefaultUserTaskLifeCycle.java
index bf65bd2191..990885df97 100644
--- 
a/jbpm/jbpm-usertask/src/main/java/org/kie/kogito/usertask/impl/lifecycle/DefaultUserTaskLifeCycle.java
+++ 
b/jbpm/jbpm-usertask/src/main/java/org/kie/kogito/usertask/impl/lifecycle/DefaultUserTaskLifeCycle.java
@@ -227,6 +227,10 @@ public class DefaultUserTaskLifeCycle implements 
UserTaskLifeCycle {
 
     private void checkPermission(UserTaskInstance userTaskInstance, String 
user, Collection<String> roles) {
 
+        if (user == null) {
+            throw new UserTaskInstanceNotAuthorizedException("No user defined 
to perform an operation on user task " + userTaskInstance.getId());
+        }
+
         if (WORKFLOW_ENGINE_USER.equals(user)) {
             return;
         }


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to