New request
#15231: Users with view-only permissions cannot use workflows
We'll provision a sandbox, run an agent against the issue, and open a draft PR. You can pull the branch and iterate from there.
Bug Description
When a user only has view permissions for workflows in Twenty, they are unable to use a workflow, even though the workflow is visible and active.
Steps to reproduce:
1 - Create and activate a workflow (for example, with a manual trigger).
2 - Set the workflow permissions to view only. <img width="513" height="243" alt="Image" src="https://github.com/user-attachments/assets/501ae6d7-622e-45a3-972e-751ffa363d5f" />
3 - Enable “Manage workflow” and open the workflows page — the workflow is visible and can be used. <img width="443" height="36" alt="Image" src="https://github.com/user-attachments/assets/4f4097f2-0194-4df3-a345-8b2efb987544" />
<img width="404" height="79" alt="Image" src="https://github.com/user-attachments/assets/bc38e188-2c96-4f05-b362-15bf505aaa70" />4 - Disable “Manage workflow” and open the workflows page again — the workflow is not visible and cannot be used. <img width="443" height="36" alt="Image" src="https://github.com/user-attachments/assets/59f815dd-cc29-44af-8d10-0f54332aee22" />
<img width="404" height="79" alt="Image" src="https://github.com/user-attachments/assets/920aaf0a-b260-48b7-b0c0-5db1fcdffbf6" />Expected behavior:
Users with view-only access should still be able to use active workflows, as long as they have the necessary permissions to view them. They should not be able to edit, delete, or destroy workflows.
Current behavior:
Users with view-only permissions cannot use workflows at all.
Technical inputs
-
This issue likely relates to the permission handling logic for workflows.
-
The visibility logic works correctly (workflows are shown), but the execution logic is probably tied to the “manage workflow” permission instead of the view permission.
Read-only workflow permissions incorrectly block execution of active workflows.
- packages/twenty-server/src/engine/core-modules/permissions/permissions.service.ts
- packages/twenty-server/src/engine/core-modules/workflow/workflow.resolver.ts
- packages/twenty-front/src/modules/views/hooks/usePermissions.ts
- packages/twenty-front/src/modules/workflow/components/WorkflowPage.tsx