Depending on the workflow attributes should be set to read-only for certain roles. This enables that these certain roles can only see the attribute value, but not change them. Via another role the attribute could then be modified if necessary (or in a different state of the workflow).

Comments

  • @Govind P.

    If you extend the concept a little, the requirement of Hans T.
    (https://ideaspace.collab.net/default/Idea/Detail/15) can also be covered:

    It should be possible to define the default write access to an attribute at attribute level.
    Role-dependent exceptions should be definable at attribute level (workflow independent) and at workflow status level.

    This approach could later be extended to approval workflows.