The misunderstood Perform Privilege
According to the documentation, the Work-.Perform privilege can be used for 2 separate purposes:
- Lets a user perform assignments that appear on worklists other than her own worklist,
- the ability to interact with the Where-Am-I? display
If you think about it... whatever do those 2 have in common?
The former of these has vastly greater security ramifications, no?
And yet, the WorkMgr4 access role has Perform for Production level 5.
Begging the old question of whether roles are templates (to be dutifully copied) or mere "examples" (to be looked at, but not directly used).
***Updated by moderator: Lochan to add Categories***