Each workflow instance in Alfresco works against a document, the start task "submit" the document, the other tasks in the workflow might add another document, edit attached document, remove attached document and only allowed to read the attached document. This behaviour is set in the workflow model by overriding bpm:packageActionGroup and bpm:packageActionItemGroup.
List of action groups available by default :
- read_package_item_actions
allow viewing of package items - edit_package_item_actions
above + allow modification (edit, checkout, ...) of package items - edit_and_remove_package_item_actions
above + allow removal of package items - remove_package_item_actions
allow removal (but not modification) of package items - add_package_item_actions
allow addition of new package items
Sample model definition which overrides the default action.
<type name="mynamespace:taskname">
<parent>bpm:workflowTask</parent>
<overrides>
<property name="bpm:packageActionGroup">
<default>add_package_item_actions</default>
</property>
<property name="bpm:packageItemActionGroup">
<default>edit_package_item_actions</default>
</property>
</overrides>
</type>
I guess this is enough for now.