[mcraeteisha]

Issue

Ticket: FOUR-33773

Users with only Edit Personal Profile could set their own status to Active or Inactive. Out of Office and the replacement user (Delegation) were available only on Admin → Users → Edit User, along with Blocked, Scheduled, and Manager.

Edit Profile now offers Out of Office and a replacement picker for the signed-in user. Blocked, Scheduled, and Manager stay on the admin user editor.

Solution

package-advanced-user-manager

• Add Out of Office to the Edit Profile status list
• Add the Delegation picker to Edit Profile, using a profile lookup that returns id and full name for active users and excludes the current user
• Clear delegation_user_id when the replacement user is deleted
• Clear a stored replacement on save when that user is missing, soft-deleted, or a system user

processmaker

• Load the profile settings add-on slots, passing the signed-in user, so the Delegation picker renders on Edit Profile
• Send delegation_user_id with a personal-profile save, and send only the personal-profile fields for users who are not administrators and do not have Edit Users
• Accept delegation_user_id on a self-service user update
• Allow Active, Inactive, and Out of Office. Keep an administrator-assigned status, such as Scheduled, when the save does not change it
• Before validation, clear a replacement the profile picker can no longer load so the rest of the save is not rejected
• Give a task to an Out of Office user's replacement only when the replacement is Active and not deleted. This is checked when the task is assigned, so a replacement who later becomes Inactive, Out of Office, or Scheduled does not receive it. It applies to new tasks and to reassignment
• When a reassignment finds nobody who can take the task, assign it to the Process Manager instead of saving it unassigned, and skip the reassignment notification when there is no assignee

With no usable replacement (none set, deleted, or not Active), a new task follows the existing empty-Delegation path and goes to the Process Manager, and a reassigned task also goes to the Process Manager. A self-service task stays unassigned. If the process has no Process Manager, the existing "no Process Manager" error is returned, as before. Tasks already moved are not pulled back, and in-progress tasks are not moved when a user goes Out of Office.

How To Test

Automated Tests

• phpunit vendor/processmaker/package-advanced-user-manager/tests/Feature/PersonalProfileOutOfOfficeTest.php
• phpunit tests/Feature/Api/UsersTest.php --filter testSelfServiceUpdate
• phpunit tests/Feature/ProfileTest.php --filter testEditProfilePassesSignedInUserToSettingsAddons
• phpunit tests/Model/UserTest.php --filter testOnlyAnActiveReplacementCanReceiveADelegatedTask
• phpunit tests/Feature/Api/TaskAssignmentByVariableTest.php --filter testOutOfOfficeAssignmentUsesOnlyAnActiveReplacement
• phpunit tests/Feature/Api/TaskAssignmentTest.php --filter testUnavailableReplacementResolvesToProcessManager

Manual Tests

1. Sign in as a user whose only relevant permission is Edit Personal Profile.
2. Open Edit Profile. Confirm the status list is Active, Inactive, and Out of Office.
3. Confirm Delegation is shown and Manager, Blocked, and Scheduled are not.
4. Set Out of Office, choose a replacement, and save. Refresh and confirm both values persisted.
5. Set the status back to Active without changing Delegation. Confirm new tasks still come to that user, and the replacement remains saved.
6. On Admin → Users → Edit User, confirm Active, Inactive, Blocked, Out of Office, Scheduled, Delegation, and Manager are still available.
7. Set the user to Out of Office again. As an administrator, set the replacement to Inactive. Confirm new tasks for the Out of Office user go to the Process Manager, not the replacement.
8. Delete the replacement user. Confirm Delegation is cleared on the other user.
9. Set that user to Out of Office again without choosing a replacement. Confirm new tasks are not assigned to the deleted user.

ci:package-advanced-user-manager:task/FOUR-33773
ci:deploy

Code Review Checklist

• I have pulled this code locally and tested it on my instance, along with any associated packages.
• This code adheres to ProcessMaker Coding Guidelines.
• This code includes a unit test or an E2E test that tests its functionality, or is covered by an existing test.
• This solution fixes the bug reported in the original ticket.
• This solution does not alter the expected output of a component in a way that would break existing Processes.
• This solution does not implement any breaking changes that would invalidate documentation or cause existing Processes to fail.
• This solution has been tested with enterprise packages that rely on its functionality and does not introduce bugs in those packages.
• This code does not duplicate functionality that already exists in the framework or in ProcessMaker.
• This ticket conforms to the PRD associated with this part of ProcessMaker..

[cursor]

PR Summary

Medium Risk
Changes core workflow task assignment and reassignment fallbacks; behavior shifts when delegates are inactive or missing, though covered by new tests.

Overview
Users with Edit Personal Profile can set Out of Office and a delegation (replacement) user from Edit Profile, with the API accepting delegation_user_id and restricting self-service status to Active, Inactive, and Out of Office (while still allowing save when the account already has an admin-only status like Scheduled). Stale or invalid replacements are cleared before validation so profile saves do not fail when the picker can no longer load the delegate.

Task assignment now substitutes an out-of-office assignee only when the linked replacement is ACTIVE and not deleted (activeDelegationUserId / acceptResolvedAssignee), including process-variable assignment and the assignment-process path. If reassignment resolves to nobody eligible, the task goes to the process manager instead of staying unassigned, and reassignment notifications are skipped when there is no assignee.

The profile UI loads settings add-ons with the signed-in user, sends a trimmed payload for self-service saves, and raw execution queries align with the same delegation and soft-delete rules.

^{Reviewed by Cursor Bugbot for commit 41aef59. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Stale Bugbot comment from a previous run.

[vladyrichter]

QA server K8S was successfully deployed https://tenant-1.ci-8cc146d8fa.engk8s.processmaker.net

[vladyrichter]

QA server K8S was successfully deployed https://tenant-1.ci-8cc146d8fa.engk8s.processmaker.net

[eiresendez]

Approved! I'm just adding a possible edge case but not a blocker, if replacements are required to remain assignable.

[cursor]

Stale Bugbot comment from a previous run.

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 2 potential issues.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit dc43686. Configure here.}

[vladyrichter]

QA server K8S was successfully deployed https://tenant-1.ci-8cc146d8fa.engk8s.processmaker.net

[nolanpro]

QA server K8S was successfully deployed https://tenant-1.ci-8cc146d8fa.engk8s.processmaker.net

[decisions-sonarqube]

Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarQube

[nolanpro]

QA server K8S was successfully deployed https://tenant-1.ci-8cc146d8fa.engk8s.processmaker.net