HOR-3968

2017-10-11 13:47:24 -04:00
parent dc16c88124
commit ab5a6526de
39 changed files with 177 additions and 178 deletions
--- a/workflow/engine/src/ProcessMaker/Services/Api/Cases.php
+++ b/workflow/engine/src/ProcessMaker/Services/Api/Cases.php
@@ -757,11 +757,11 @@ class Cases extends Api

    /**
     * @url POST
-     *
+     * @access protected
+     * @class AccessControl {@permission PM_CASES}
     * @param string $pro_uid {@from body} {@min 32}{@max 32}
     * @param string $tas_uid {@from body} {@min 32}{@max 32}
     * @param array $variables {@from body}
-     *
     */
    public function doPostCase($pro_uid, $tas_uid, $variables = null)
    {
@@ -777,12 +777,12 @@ class Cases extends Api

    /**
     * @url POST /impersonate
-     *
+     * @access protected
+     * @class AccessControl {@permission PM_CASES}
     * @param string $pro_uid {@from body} {@min 32}{@max 32}
     * @param string $usr_uid {@from body} {@min 32}{@max 32}
     * @param string $tas_uid {@from body} {@min 32}{@max 32}
     * @param array $variables {@from body}
-     *
     */
    public function doPostCaseImpersonate($pro_uid, $usr_uid, $tas_uid, $variables = null)
    {
@@ -1097,14 +1097,12 @@ class Cases extends Api
    /**
     * Put Case Variables
     *
+     * @url POST /:app_uid/note
+     * @access protected
+     * @class AccessControl {@permission PM_CASES}
     * @param string $app_uid {@min 1}{@max 32}
     * @param string $note_content {@min 1}{@max 500}
     * @param int $send_mail {@choice 1,0}
-     *
-     * @author Brayan Pereyra (Cochalo) <brayan@colosa.com>
-     * @copyright Colosa - Bolivia
-     *
-     * @url POST /:app_uid/note
     */
    public function doPostCaseNote($app_uid, $note_content, $send_mail = 0)
    {
@@ -1231,10 +1229,11 @@ class Cases extends Api

    /**
     * Mark a task process as a bookmark
+     * 
     * @url POST /bookmark/:tas_uid
-     *
+     * @access protected
+     * @class AccessControl {@permission PM_CASES}
     * @param string $tas_uid {@min 32}{@max 32}
-     *
     */
    public function doPostBookmarkStartCase($tas_uid)
    {
--- a/workflow/engine/src/ProcessMaker/Services/Api/Cases/InputDocument.php
+++ b/workflow/engine/src/ProcessMaker/Services/Api/Cases/InputDocument.php
@@ -97,7 +97,8 @@ class InputDocument extends Api

    /**
     * @url POST /:app_uid/input-document
-     *
+     * @access protected
+     * @class AccessControl {@permission PM_CASES}
     * @param string $app_uid         { @min 32}{@max 32}
     * @param string $tas_uid         {@min 32}{@max 32}
     * @param string $app_doc_comment
--- a/workflow/engine/src/ProcessMaker/Services/Api/Cases/OutputDocument.php
+++ b/workflow/engine/src/ProcessMaker/Services/Api/Cases/OutputDocument.php
@@ -134,7 +134,8 @@ class OutputDocument extends Api

    /**
     * @url POST /:app_uid/:del_index/output-document/:out_doc_uid
-     *
+     * @access protected
+     * @class AccessControl {@permission PM_CASES}
     * @param string $app_uid     {@min 32}{@max 32}
     * @param int    $del_index   {@min 1}
     * @param string $out_doc_uid {@min 32}{@max 32}
--- a/workflow/engine/src/ProcessMaker/Services/Api/Cases/Variable.php
+++ b/workflow/engine/src/ProcessMaker/Services/Api/Cases/Variable.php
@@ -79,12 +79,12 @@ class Variable extends Api

    /**
     * @url POST /:app_uid/:del_index/variable/:var_name
-     *
+     * @access protected
+     * @class AccessControl {@permission PM_CASES}
     * @param string $app_uid      {@min 32}{@max 32}
     * @param int    $del_index    {@min 1}
     * @param string $var_name
     * @param array  $request_data
-     *
     * @status 201
     */
    public function doPostVariable($app_uid, $del_index, $var_name, array $request_data)
--- a/workflow/engine/src/ProcessMaker/Services/Api/Catalog.php
+++ b/workflow/engine/src/ProcessMaker/Services/Api/Catalog.php
@@ -39,12 +39,9 @@ class Catalog extends Api

    /**
     * @url POST
-     *
+     * @access protected
+     * @class AccessControl {@permission PM_DASHBOARD}
     * @param array $request_data
-     *
-     * @author Marco Antonio Nina <marco.antonio.nina@colosa.com>
-     * @copyright Colosa - Bolivia
-     *
     * @status 201
     */
    public function doPost($request_data)
--- a/workflow/engine/src/ProcessMaker/Services/Api/Consolidated.php
+++ b/workflow/engine/src/ProcessMaker/Services/Api/Consolidated.php
@@ -133,18 +133,16 @@ class Consolidated extends Api
    /**
     * Post Derivate
     *
+     * @url POST /derivate/:app_uid/:app_number/:del_index/:field_grid/:field_grid_val
+     * @url POST /derivate/:app_uid/:app_number/:del_index/:field_grid/
+     * @access protected
+     * @class AccessControl {@permission PM_CASES}
     * @param string $app_uid {@min 1} {@max 32}
     * @param string $app_number
     * @param int $del_index
     * @param string $field_grid
     * @param string $field_grid_val
     * @return array
-     *
-     * @author Brayan Pereyra (Cochalo) <brayan@colosa.com>
-     * @copyright Colosa - Bolivia
-     *
-     * @url POST /derivate/:app_uid/:app_number/:del_index/:field_grid/:field_grid_val
-     * @url POST /derivate/:app_uid/:app_number/:del_index/:field_grid/
     */
    public function doPostDerivate($app_uid, $app_number, $del_index, $field_grid, $field_grid_val = '')
    {
--- a/workflow/engine/src/ProcessMaker/Services/Api/Dashboard.php
+++ b/workflow/engine/src/ProcessMaker/Services/Api/Dashboard.php
@@ -221,10 +221,9 @@ class Dashboard extends Api

    /**
     * @url POST
-     *
+     * @access protected
+     * @class AccessControl {@permission PM_DASHBOARD}
     * @param array $request_data
-     *
-     *
     * @status 201
     */
    public function doPostDashboard($request_data)
@@ -279,11 +278,10 @@ class Dashboard extends Api
    }

    /**
-     * @param array $request_data
-     *
-     *
     * @url POST /owner
-     *
+     * @access protected
+     * @class AccessControl {@permission PM_DASHBOARD}
+     * @param array $request_data
     * @status 201
     */
    public function doPostOwner($request_data)
@@ -317,11 +315,10 @@ class Dashboard extends Api
    }

    /**
-     * @param array $request_data
-     *
-     *
     * @url POST /indicator
-     *
+     * @access protected
+     * @class AccessControl {@permission PM_DASHBOARD}
+     * @param array $request_data
     * @status 201
     */
    public function doPostIndicator($request_data)
@@ -376,10 +373,10 @@ class Dashboard extends Api
    /**
     * Post dashboards configuration by userUid
     *
-     * @param array $request_data
-     *
     * @url POST /config/
-     *
+     * @access protected
+     * @class AccessControl {@permission PM_DASHBOARD}
+     * @param array $request_data
     */
    public function doPostDashboardConfigByUsrUid($request_data)
    {
--- a/workflow/engine/src/ProcessMaker/Services/Api/Department.php
+++ b/workflow/engine/src/ProcessMaker/Services/Api/Department.php
@@ -103,12 +103,11 @@ class Department extends Api

    /**
     * @url POST /:dep_uid/assign-user
-     *
+     * @access protected
+     * @class AccessControl {@permission PM_USERS}
     * @param string $dep_uid      {@min 32}{@max 32}
     * @param array  $request_data
-     *
     * @status 201
-     *
     */
    public function doPostAssignUser($dep_uid, array $request_data)
    {
@@ -181,14 +180,12 @@ class Department extends Api

    /**
     * @url POST
-     *
+     * @access protected
+     * @class AccessControl {@permission PM_USERS}
     * @param array $request_data
     * @param string $dep_title {@from body} {@min 1}
-     *
     * @return array
-     *
     * @status 201
-     *
     */
    public function doPost($request_data, $dep_title)
    {
--- a/workflow/engine/src/ProcessMaker/Services/Api/EmailServer.php
+++ b/workflow/engine/src/ProcessMaker/Services/Api/EmailServer.php
@@ -86,7 +86,8 @@ class EmailServer extends Api

    /**
     * @url POST /test-connection
-     *
+     * @access protected
+     * @class AccessControl {@permission PM_SETUP_EMAIL}
     * @param array $request_data
     */
    public function doPostTestConnection(array $request_data)
@@ -104,9 +105,9 @@ class EmailServer extends Api

    /**
     * @url POST
-     *
+     * @access protected
+     * @class AccessControl {@permission PM_SETUP_EMAIL}
     * @param array $request_data
-     *
     * @status 201
     */
    public function doPost(array $request_data)
--- a/workflow/engine/src/ProcessMaker/Services/Api/File.php
+++ b/workflow/engine/src/ProcessMaker/Services/Api/File.php
@@ -12,8 +12,9 @@ use \Luracast\Restler\RestException;
 class File extends Api
 {
    /**
-     *
     * @url POST /upload
+     * @access protected
+     * @class AccessControl {@permission PM_FACTORY}
     * @param array  $request_data
     */
    public function doPostFilesUpload($request_data)
--- a/workflow/engine/src/ProcessMaker/Services/Api/Group.php
+++ b/workflow/engine/src/ProcessMaker/Services/Api/Group.php
@@ -74,9 +74,9 @@ class Group extends Api

    /**
     * @url POST
-     *
+     * @access protected
+     * @class AccessControl {@permission PM_USERS}
     * @param array $request_data
-     *
     * @status 201
     */
    public function doPost($request_data)
--- a/workflow/engine/src/ProcessMaker/Services/Api/Group/User.php
+++ b/workflow/engine/src/ProcessMaker/Services/Api/Group/User.php
@@ -13,10 +13,10 @@ class User extends Api
 {
    /**
     * @url POST /:grp_uid/user
-     *
+     * @access protected
+     * @class AccessControl {@permission PM_USERS}
     * @param string $grp_uid      {@min 32}{@max 32}
     * @param array  $request_data
-     *
     * @status 201
     */
    public function doPostUser($grp_uid, $request_data)
@@ -33,9 +33,9 @@ class User extends Api

    /**
     * @url POST /batch-users
-     *
+     * @access protected
+     * @class AccessControl {@permission PM_USERS}
     * @param array $request_data
-     *
     * @status 201
     */
    public function doPostBatchUsers($request_data)
--- a/workflow/engine/src/ProcessMaker/Services/Api/Light.php
+++ b/workflow/engine/src/ProcessMaker/Services/Api/Light.php
@@ -967,15 +967,14 @@ class Light extends Api
    /**
     * Execute Trigger case
     *
+     * @url POST /process/:prj_uid/task/:act_uid/case/:cas_uid/step/:step_uid/execute-trigger/:type
+     * @access protected
+     * @class AccessControl {@permission PM_CASES}
     * @param string $prj_uid {@min 1}{@max 32}
     * @param string $act_uid {@min 1}{@max 32}
     * @param string $cas_uid {@min 1}{@max 32}
     * @param string $step_uid {@min 32}{@max 32}
     * @param string $type {@choice before,after}
-     *
-     * @copyright Colosa - Bolivia
-     *
-     * @url POST /process/:prj_uid/task/:act_uid/case/:cas_uid/step/:step_uid/execute-trigger/:type
     */
    public function doPutExecuteTriggerCase($prj_uid, $act_uid, $cas_uid, $step_uid, $type)
    {
@@ -1134,7 +1133,8 @@ class Light extends Api

    /**
     * @url POST /process/:pro_uid/task/:task_uid/start-case
-     *
+     * @access protected
+     * @class AccessControl {@permission PM_CASES}
     * @param string $pro_uid {@min 32}{@max 32}
     * @param string $task_uid {@min 32}{@max 32}
     */
@@ -1229,7 +1229,8 @@ class Light extends Api

    /**
     * @url POST /case/:app_uid/upload/location
-     *
+     * @access protected
+     * @class AccessControl {@permission PM_CASES}
     * @param string $app_uid { @min 32}{@max 32}
     * @param float $latitude {@min -90}{@max 90}
     * @param float $longitude {@min -180}{@max 180}
@@ -1271,7 +1272,8 @@ class Light extends Api

    /**
     * @url POST /case/:app_uid/download64
-     *
+     * @access protected
+     * @class AccessControl {@permission PM_CASES}
     * @param string $app_uid {@min 32}{@max 32}
     */
    public function postDownloadFile($app_uid, $request_data)
@@ -1369,7 +1371,8 @@ class Light extends Api

    /**
     * @url POST /case/:app_uid/upload
-     *
+     * @access protected
+     * @class AccessControl {@permission PM_CASES}
     * @param $access
     * @param $refresh
     * @return mixed
@@ -1389,7 +1392,8 @@ class Light extends Api

    /**
     * @url POST /case/:app_uid/upload/:app_doc_uid
-     *
+     * @access protected
+     * @class AccessControl {@permission PM_CASES}
     * @param $access
     * @param $refresh
     * @return mixed
@@ -1409,7 +1413,8 @@ class Light extends Api

    /**
     * @url POST /case/:app_uid/claim
-     *
+     * @access protected
+     * @class AccessControl {@permission PM_CASES}
     * @param $app_uid {@min 1}{@max 32}
     * @return mixed
     */
@@ -1500,13 +1505,13 @@ class Light extends Api
    /**
     * Post Case Notes
     *
+     * @url POST /case/:app_uid/note
+     * @access protected
+     * @class AccessControl {@permission PM_CASES}
     * @param string $app_uid {@min 1}{@max 32}
     * @param string $noteContent {@min 1}{@max 500}
     * @param int $sendMail {@choice 1,0}
-     *
     * @copyright Colosa - Bolivia
-     *
-     * @url POST /case/:app_uid/note
     */
    public function doPostCaseNote($app_uid, $noteContent, $sendMail = 0)
    {
@@ -1591,13 +1596,13 @@ class Light extends Api
    }

    /**
-     * @return stdclass
-     * @throws RestException
-     *
+     * @url POST /reassign/:app_uid/user/:to_usr_uid
+     * @access protected
+     * @class AccessControl {@permission PM_REASSIGNCASE, PM_REASSIGNCASE_SUPERVISOR}
     * @param string $app_uid {@min 1}{@max 32}
     * @param string $to_usr_uid {@min 1}{@max 32}
-     *
-     * @url POST /reassign/:app_uid/user/:to_usr_uid
+     * @return stdclass
+     * @throws RestException
     */
    public function reassignCase($app_uid, $to_usr_uid)
    {
@@ -1615,12 +1620,12 @@ class Light extends Api
    /**
     * Paused Case
     *
+     * @url POST /cases/:app_uid/pause
+     * @access protected
+     * @class AccessControl {@permission PM_CASES}
+     * @param string $app_uid {@min 1}{@max 32}
     * @return stdclass
     * @throws RestException
-     *
-     * @param string $app_uid {@min 1}{@max 32}
-     *
-     * @url POST /cases/:app_uid/pause
     */
    public function pauseCase($app_uid, $request_data)
    {
@@ -1639,12 +1644,12 @@ class Light extends Api
    /**
     * Unpaused Case
     *
+     * @url POST /cases/:app_uid/unpause
+     * @access protected
+     * @class AccessControl {@permission PM_CASES}
+     * @param string $app_uid {@min 1}{@max 32}
     * @return stdclass
     * @throws RestException
-     *
-     * @param string $app_uid {@min 1}{@max 32}
-     *
-     * @url POST /cases/:app_uid/unpause
     */
    public function unpauseCase($app_uid)
    {
@@ -1664,11 +1669,10 @@ class Light extends Api
    /**
     * Cancel Case
     *
-     * @param string $cas_uid {@min 1}{@max 32}
-     *
-     * @copyright Colosa - Bolivia
-     *
     * @url POST /cases/:app_uid/cancel
+     * @access protected
+     * @class AccessControl {@permission PM_CASES}
+     * @param string $cas_uid {@min 1}{@max 32}
     */
    public function doPutCancelCase($app_uid)
    {
@@ -1837,6 +1841,8 @@ class Light extends Api
     * Get next step
     *
     * @url POST /get-next-step/:app_uid
+     * @access protected
+     * @class AccessControl {@permission PM_CASES}
     * @return array
     */
    public function doGetStep($app_uid, $request_data)
@@ -1931,8 +1937,12 @@ class Light extends Api
    }

    /**
-     * This function checks if the application uids sent are in the draft list for the specified user
+     * This function checks if the application uids sent are in the draft list for 
+     * the specified user.
+     * 
     * @url POST /draft/check
+     * @access protected
+     * @class AccessControl {@permission PM_CASES}
     * @param array $requestData
     * @return array $response
     * @throws Exception
--- a/workflow/engine/src/ProcessMaker/Services/Api/Process.php
+++ b/workflow/engine/src/ProcessMaker/Services/Api/Process.php
@@ -63,6 +63,10 @@ class Process extends Api
        return $response;
    }

+    /**
+     * @access protected
+     * @class AccessControl {@permission PM_FACTORY}
+     */
    public function post($request_data = null)
    {
        defined('SYS_LANG') || define("SYS_LANG", $request_data["lang"]);
--- a/workflow/engine/src/ProcessMaker/Services/Api/Project/Activity/Assignee.php
+++ b/workflow/engine/src/ProcessMaker/Services/Api/Project/Activity/Assignee.php
@@ -93,12 +93,12 @@ class Assignee extends Api

    /**
     * @url POST /:prjUid/activity/:actUid/assignee
-     *
+     * @access protected
+     * @class AccessControl {@permission PM_FACTORY}
     * @param string $prjUid {@min 32} {@max 32}
     * @param string $actUid {@min 32} {@max 32}
     * @param string $aas_uid {@min 32} {@max 32}
     * @param string $aas_type {@choice user,group}
-     *
     * @status 201
     */
    public function doPostActivityAssignee($prjUid, $actUid, $aas_uid, $aas_type)
@@ -192,12 +192,12 @@ class Assignee extends Api

    /**
     * @url POST /:prjUid/activity/:actUid/adhoc-assignee
-     *
+     * @access protected
+     * @class AccessControl {@permission PM_FACTORY}
     * @param string $prjUid {@min 32} {@max 32}
     * @param string $actUid {@min 32} {@max 32}
     * @param string $ada_uid {@min 32} {@max 32}
     * @param string $ada_type {@choice user,group}
-     *
     * @status 201
     */
    public function doPostActivityAdhocAssignee($prjUid, $actUid, $ada_uid, $ada_type)
--- a/workflow/engine/src/ProcessMaker/Services/Api/Project/Activity/Step.php
+++ b/workflow/engine/src/ProcessMaker/Services/Api/Project/Activity/Step.php
@@ -35,7 +35,8 @@ class Step extends Api

    /**
     * @url POST /:prj_uid/activity/:act_uid/step
-     *
+     * @access protected
+     * @class AccessControl {@permission PM_FACTORY}
     * @param string $act_uid        {@min 32}{@max 32}
     * @param string $prj_uid        {@min 32}{@max 32}
     * @param array  $request_data
@@ -44,7 +45,6 @@ class Step extends Api
     * @param string $step_condition {@from body}
     * @param int    $step_position  {@from body}{@min 1}
     * @param string $step_mode      {@from body}{@choice EDIT,VIEW}{@required true}
-     *
     * @status 201
     */
    public function doPostActivityStep(
@@ -219,7 +219,8 @@ class Step extends Api

    /**
     * @url POST /:prj_uid/activity/:act_uid/step/all
-     *
+     * @access protected
+     * @class AccessControl {@permission PM_FACTORY}
     * @param string $act_uid        {@min 32}{@max 32}
     * @param string $prj_uid        {@min 32}{@max 32}
     * @param array  $request_data
@@ -228,7 +229,6 @@ class Step extends Api
     * @param string $step_condition {@from body}
     * @param int    $step_position  {@from body}{@min 1}
     * @param string $step_mode      {@from body}{@choice EDIT,VIEW}{@required true}
-     *
     * @status 201
     */
    public function doPostActivityStepAll(
--- a/workflow/engine/src/ProcessMaker/Services/Api/Project/Activity/Step/Trigger.php
+++ b/workflow/engine/src/ProcessMaker/Services/Api/Project/Activity/Step/Trigger.php
@@ -35,12 +35,12 @@ class Trigger extends Api

    /**
     * @url POST /:prj_uid/activity/:act_uid/step/:step_uid/trigger
-     *
+     * @access protected
+     * @class AccessControl {@permission PM_FACTORY}
     * @param string $step_uid
     * @param string $act_uid
     * @param string $prj_uid
     * @param StepTriggerPostStructure $request_data
-     *
     * @status 201
     */
    public function doPostActivityStepTrigger($step_uid, $act_uid, $prj_uid, StepTriggerPostStructure $request_data = null)
@@ -123,11 +123,11 @@ class Trigger extends Api

    /**
     * @url POST /:prj_uid/activity/:act_uid/step/trigger
-     *
+     * @access protected
+     * @class AccessControl {@permission PM_FACTORY}
     * @param string $act_uid
     * @param string $prj_uid
     * @param StepAssignTaskTriggerPostStructure $request_data
-     *
     * @status 201
     */
    public function doPostActivityStepAssignTaskTrigger($act_uid, $prj_uid, StepAssignTaskTriggerPostStructure $request_data = null)
--- a/workflow/engine/src/ProcessMaker/Services/Api/Project/CaseScheduler.php
+++ b/workflow/engine/src/ProcessMaker/Services/Api/Project/CaseScheduler.php
@@ -51,11 +51,11 @@ class CaseScheduler extends Api
    }

    /**
+     * @url POST /:prjUid/case-scheduler
+     * @access protected
+     * @class AccessControl {@permission PM_FACTORY}
     * @param string $prjUid {@min 32} {@max 32}
     * @param CaseSchedulerStructure $request_data
-     *
-     * @url POST /:prjUid/case-scheduler
-     *
     * @status 201
     */
    public function doPostProjectCaseScheduler($prjUid, CaseSchedulerStructure $request_data =  null)
--- a/workflow/engine/src/ProcessMaker/Services/Api/Project/CaseTrackerObject.php
+++ b/workflow/engine/src/ProcessMaker/Services/Api/Project/CaseTrackerObject.php
@@ -32,14 +32,14 @@ class CaseTrackerObject extends Api

    /**
     * @url POST /:prj_uid/case-tracker/object
-     *
+     * @access protected
+     * @class AccessControl {@permission PM_FACTORY}
     * @param string $prj_uid       {@min 32}{@max 32}
     * @param array  $request_data
     * @param string $cto_type_obj  {@from body}{@choice DYNAFORM,INPUT_DOCUMENT,OUTPUT_DOCUMENT}{@required true}
     * @param string $cto_uid_obj   {@from body}{@min 32}{@max 32}{@required true}
     * @param string $cto_condition {@from body}
     * @param int    $cto_position  {@from body}{@min 1}
-     *
     * @status 201
     */
    public function doPostCaseTrackerObject(
--- a/workflow/engine/src/ProcessMaker/Services/Api/Project/DataBaseConnection.php
+++ b/workflow/engine/src/ProcessMaker/Services/Api/Project/DataBaseConnection.php
@@ -55,9 +55,11 @@ class DataBaseConnection extends Api
    }

    /**
+     * @url POST /:prj_uid/database-connection/test
+     * @access protected
+     * @class AccessControl {@permission PM_FACTORY}
     * @param string $prj_uid {@min 1} {@max 32}
     * @param array $request_data
-     *
     * @param string $dbs_type {@from body} {@required true}
     * @param string $dbs_server {@from body} {@required false}
     * @param string $dbs_database_name {@from body} {@required false}
@@ -66,11 +68,6 @@ class DataBaseConnection extends Api
     * @param string $dbs_password {@from body}
     * @param string $dbs_description {@from body}
     * @return array
-     *
-     * @author Brayan Pereyra (Cochalo) <brayan@colosa.com>
-     * @copyright Colosa - Bolivia
-     *
-     * @url POST /:prj_uid/database-connection/test
     */
    public function doPostTestDataBaseConnection(
        $prj_uid,
@@ -94,9 +91,11 @@ class DataBaseConnection extends Api
    }

    /**
+     * @url POST /:prj_uid/database-connection
+     * @access protected
+     * @class AccessControl {@permission PM_FACTORY}
     * @param string $prj_uid {@min 1} {@max 32}
     * @param array $request_data
-     *
     * @param string $dbs_type {@from body} {@required true}
     * @param string $dbs_server {@from body} {@required false}
     * @param string $dbs_database_name {@from body} {@required false}
@@ -105,11 +104,6 @@ class DataBaseConnection extends Api
     * @param string $dbs_password {@from body}
     * @param string $dbs_description {@from body}
     * @return array
-     *
-     * @author Brayan Pereyra (Cochalo) <brayan@colosa.com>
-     * @copyright Colosa - Bolivia
-     *
-     * @url POST /:prj_uid/database-connection
     * @status 201
     */
    public function doPostDataBaseConnection(
--- a/workflow/engine/src/ProcessMaker/Services/Api/Project/DynaForm.php
+++ b/workflow/engine/src/ProcessMaker/Services/Api/Project/DynaForm.php
@@ -39,10 +39,10 @@ class DynaForm extends Api
    
    /**
     * @url POST /:prj_uid/dynaform
-     *
+     * @access protected
+     * @class AccessControl {@permission PM_FACTORY}
     * @param string $prj_uid      {@min 32}{@max 32}
     * @param array  $request_data
-     *
     * @status 201
     */
    public function doPostDynaForm($prj_uid, $request_data)
@@ -138,7 +138,8 @@ class DynaForm extends Api

    /**
     * @url POST /:prj_uid/dynaform/:dyn_uid/upload-language
-     *
+     * @access protected
+     * @class AccessControl {@permission PM_FACTORY}
     * @param string $dyn_uid {@min 32}{@max 32}
     * @param string $prj_uid {@min 32}{@max 32}
     */
@@ -155,7 +156,8 @@ class DynaForm extends Api

    /**
     * @url POST /:prj_uid/dynaform/:dyn_uid/delete-language/:lang
-     *
+     * @access protected
+     * @class AccessControl {@permission PM_FACTORY}
     * @param string $dyn_uid {@min 32}{@max 32}
     * @param string $prj_uid {@min 32}{@max 32}
     */
@@ -189,7 +191,8 @@ class DynaForm extends Api

    /**
     * @url POST /:prj_uid/dynaform/:dyn_uid/history
-     *
+     * @access protected
+     * @class AccessControl {@permission PM_FACTORY}
     * @param string $dyn_uid {@min 32}{@max 32}
     * @param string $prj_uid {@min 32}{@max 32}
     * @param array  $request_data
--- a/workflow/engine/src/ProcessMaker/Services/Api/Project/EmailEvent.php
+++ b/workflow/engine/src/ProcessMaker/Services/Api/Project/EmailEvent.php
@@ -65,7 +65,8 @@ class EmailEvent extends Api
    
    /**
     * @url POST /:prj_uid/email-event
-     *
+     * @access protected
+     * @class AccessControl {@permission PM_FACTORY}
     * @param string $prj_uid {@min 1} {@max 32}
     */
    public function doPostEmailEvent($prj_uid, array $request_data)
--- a/workflow/engine/src/ProcessMaker/Services/Api/Project/FilesManager.php
+++ b/workflow/engine/src/ProcessMaker/Services/Api/Project/FilesManager.php
@@ -37,11 +37,12 @@ class FilesManager extends Api
    }

    /**
+     * @url POST /:prj_uid/file-manager
+     * @access protected
+     * @class AccessControl {@permission PM_FACTORY}
     * @param string $prj_uid {@min 32} {@max 32}
     * @param ProcessFilesManagerStructurePost $request_data
     * @param string $prf_content
-     *
-     * @url POST /:prj_uid/file-manager
     */
    public function doPostProcessFilesManager($prj_uid, ProcessFilesManagerStructurePost $request_data, $prf_content=null)
    {
@@ -61,10 +62,11 @@ class FilesManager extends Api
    }

    /**
+     * @url POST /:prj_uid/file-manager/:prf_uid/upload
+     * @access protected
+     * @class AccessControl {@permission PM_FACTORY}
     * @param string $prj_uid {@min 32} {@max 32}
     * @param string $prf_uid {@min 32} {@max 32}
-     *
-     * @url POST /:prj_uid/file-manager/:prf_uid/upload
     */
    public function doPostProcessFilesManagerUpload($prj_uid, $prf_uid)
    {
--- a/workflow/engine/src/ProcessMaker/Services/Api/Project/InputDocument.php
+++ b/workflow/engine/src/ProcessMaker/Services/Api/Project/InputDocument.php
@@ -34,10 +34,10 @@ class InputDocument extends Api

    /**
     * @url POST /:prj_uid/input-document
-     *
+     * @access protected
+     * @class AccessControl {@permission PM_FACTORY}
     * @param string $prj_uid      {@min 32}{@max 32}
     * @param array  $request_data
-     *
     * @status 201
     */
    public function doPostInputDocument($prj_uid, $request_data)
--- a/workflow/engine/src/ProcessMaker/Services/Api/Project/MessageEventDefinition.php
+++ b/workflow/engine/src/ProcessMaker/Services/Api/Project/MessageEventDefinition.php
@@ -81,10 +81,10 @@ class MessageEventDefinition extends Api

    /**
     * @url POST /:prj_uid/message-event-definition
-     *
+     * @access protected
+     * @class AccessControl {@permission PM_FACTORY}
     * @param string $prj_uid      {@min 32}{@max 32}
     * @param array  $request_data
-     *
     * @status 201
     */
    public function doPostMessageEventDefinition($prj_uid, array $request_data)
--- a/workflow/engine/src/ProcessMaker/Services/Api/Project/MessageType.php
+++ b/workflow/engine/src/ProcessMaker/Services/Api/Project/MessageType.php
@@ -66,10 +66,10 @@ class MessageType extends Api

    /**
     * @url POST /:prj_uid/message-type
-     *
+     * @access protected
+     * @class AccessControl {@permission PM_FACTORY}
     * @param string $prj_uid      {@min 32}{@max 32}
     * @param array  $request_data
-     *
     * @status 201
     */
    public function doPostMessageType($prj_uid, array $request_data)
--- a/workflow/engine/src/ProcessMaker/Services/Api/Project/MessageType/Variable.php
+++ b/workflow/engine/src/ProcessMaker/Services/Api/Project/MessageType/Variable.php
@@ -68,11 +68,11 @@ class Variable extends Api

    /**
     * @url POST /:prj_uid/message-type/:msgt_uid/variable
-     *
+     * @access protected
+     * @class AccessControl {@permission PM_FACTORY}
     * @param string $prj_uid      {@min 32}{@max 32}
     * @param string $msgt_uid     {@min 32}{@max 32}
     * @param array  $request_data
-     *
     * @status 201
     */
    public function doPostMessageTypeVariable($prj_uid, $msgt_uid, array $request_data)
--- a/workflow/engine/src/ProcessMaker/Services/Api/Project/OutputDocuments.php
+++ b/workflow/engine/src/ProcessMaker/Services/Api/Project/OutputDocuments.php
@@ -52,10 +52,10 @@ class OutputDocuments extends Api

    /**
     * @url POST /:prjUid/output-document
-     *
+     * @access protected
+     * @class AccessControl {@permission PM_FACTORY}
     * @param string $prjUid {@min 32} {@max 32}
     * @param OutputDocumentStructure $request_data
-     *
     * @status 201
     */
    public function doPostProjectOutputDocument($prjUid, OutputDocumentStructure $request_data = null)
--- a/workflow/engine/src/ProcessMaker/Services/Api/Project/ProcessPermissions.php
+++ b/workflow/engine/src/ProcessMaker/Services/Api/Project/ProcessPermissions.php
@@ -58,9 +58,11 @@ class ProcessPermissions extends Api
    }

    /**
+     * @url POST /:prj_uid/process-permission/
+     * @access protected
+     * @class AccessControl {@permission PM_FACTORY}
     * @param string $prj_uid {@min 1} {@max 32}
     * @param array $request_data
-     *
     * @param string $usr_uid {@from body} {@min 1} {@max 32}
     * @param string $op_user_relation {@from body} {@choice 1,2}
     * @param string $op_case_status {@from body} {@choice ALL,DRAFT,TO_DO,PAUSED,COMPLETED}
@@ -72,13 +74,7 @@ class ProcessPermissions extends Api
     * @param string $dynaforms {@from body}
     * @param string $inputs {@from body}
     * @param string $outputs {@from body}
-     *
-     * @author Brayan Pereyra (Cochalo) <brayan@colosa.com>
-     * @copyright Colosa - Bolivia
-     *
     * @return array
-     *
-     * @url POST /:prj_uid/process-permission/
     * @status 201
     */
    public function doPostProcessPermission(
--- a/workflow/engine/src/ProcessMaker/Services/Api/Project/ProcessSupervisors.php
+++ b/workflow/engine/src/ProcessMaker/Services/Api/Project/ProcessSupervisors.php
@@ -235,11 +235,11 @@ class ProcessSupervisors extends Api

    /**
     * @url POST /:prjUid/process-supervisor
-     *
+     * @access protected
+     * @class AccessControl {@permission PM_FACTORY}
     * @param string $prjUid {@min 32} {@max 32}
     * @param string $usr_uid {@min 32} {@max 32}
     * @param string $pu_type {@choice SUPERVISOR,GROUP_SUPERVISOR}
-     *
     * @status 201
     */
    public function doPostProcessSupervisor($prjUid, $usr_uid, $pu_type)
@@ -258,11 +258,11 @@ class ProcessSupervisors extends Api

    /**
     * @url POST /:prjUid/process-supervisor/dynaform
-     *
+     * @access protected
+     * @class AccessControl {@permission PM_FACTORY}
     * @param string $prjUid {@min 32} {@max 32}
     * @param string $dyn_uid {@min 32} {@max 32}
     * @param int $pud_position
-     *
     * @status 201
     */
    public function doPostProcessSupervisorDynaform($prjUid, $dyn_uid, $pud_position = null)
@@ -281,11 +281,11 @@ class ProcessSupervisors extends Api

    /**
     * @url POST /:prjUid/process-supervisor/input-document
-     *
+     * @access protected
+     * @class AccessControl {@permission PM_FACTORY}
     * @param string $prjUid {@min 32} {@max 32}
     * @param string $inp_doc_uid {@min 32} {@max 32}
     * @param int $pui_position
-     *
     * @status 201
     */
    public function doPostProcessSupervisorInputDocument($prjUid, $inp_doc_uid, $pui_position = null)
--- a/workflow/engine/src/ProcessMaker/Services/Api/Project/ProjectUsers.php
+++ b/workflow/engine/src/ProcessMaker/Services/Api/Project/ProjectUsers.php
@@ -70,11 +70,12 @@ class ProjectUsers extends Api
    }

    /**
+     * @url POST /:prj_uid/ws/user/can-start-task
+     * @access protected
+     * @class AccessControl {@permission PM_FACTORY}
     * @param string $prj_uid {@min 32} {@max 32}
     * @param string $act_uid {@min 32} {@max 32}
     * @param wsUserCanStartTaskStructure $request_data
-     *
-     * @url POST /:prj_uid/ws/user/can-start-task
     */
    public function doPostProjectWsUserCanStartTask($prj_uid, $act_uid = null, wsUserCanStartTaskStructure $request_data =  null)
    {
--- a/workflow/engine/src/ProcessMaker/Services/Api/Project/ReportTable.php
+++ b/workflow/engine/src/ProcessMaker/Services/Api/Project/ReportTable.php
@@ -95,20 +95,17 @@ class ReportTable extends Api
    }

    /**
+     * @url POST /:prj_uid/report-table
+     * @access protected
+     * @class AccessControl {@permission PM_FACTORY}
     * @param string $prj_uid {@min 1} {@max 32}
     * @param array $request_data
-     *
     * @param string $rep_tab_name {@from body}
     * @param string $rep_tab_dsc {@from body}
     * @param string $rep_tab_connection {@from body}
     * @param string $rep_tab_type {@from body} {@choice NORMAL,GRID}
     * @param string $rep_tab_grid {@from body}
     * @return array
-     *
-     * @author Brayan Pereyra (Cochalo) <brayan@colosa.com>
-     * @copyright Colosa - Bolivia
-     *
-     * @url POST /:prj_uid/report-table
     * @status 201
     */
    public function doPostReportTable(
--- a/workflow/engine/src/ProcessMaker/Services/Api/Project/ScriptTask.php
+++ b/workflow/engine/src/ProcessMaker/Services/Api/Project/ScriptTask.php
@@ -81,10 +81,10 @@ class ScriptTask extends Api

    /**
     * @url POST /:prj_uid/script-task
-     *
+     * @access protected
+     * @class AccessControl {@permission PM_FACTORY}
     * @param string $prj_uid      {@min 32}{@max 32}
     * @param array  $request_data
-     *
     * @status 201
     */
    public function doPostScriptTask($prj_uid, array $request_data)
--- a/workflow/engine/src/ProcessMaker/Services/Api/Project/TimerEvent.php
+++ b/workflow/engine/src/ProcessMaker/Services/Api/Project/TimerEvent.php
@@ -87,10 +87,10 @@ class TimerEvent extends Api

    /**
     * @url POST /:prj_uid/timer-event
-     *
+     * @access protected
+     * @class AccessControl {@permission PM_FACTORY}
     * @param string $prj_uid      {@min 32}{@max 32}
     * @param array  $request_data
-     *
     * @status 201
     */
    public function doPostTimerEvent($prj_uid, array $request_data)
--- a/workflow/engine/src/ProcessMaker/Services/Api/Project/Trigger.php
+++ b/workflow/engine/src/ProcessMaker/Services/Api/Project/Trigger.php
@@ -55,6 +55,9 @@ class Trigger extends Api
    }

    /**
+     * @url POST /:projectUid/trigger
+     * @access protected
+     * @class AccessControl {@permission PM_FACTORY}
     * @param string $projectUid {@min 1} {@max 32}
     * @param array $request_data
     * @param string $tri_title {@from body} {@min 1}
@@ -63,11 +66,6 @@ class Trigger extends Api
     * @param string $tri_webbot {@from body}
     * @param string $tri_param {@from body}
     * @return array
-     *
-     * @author Brayan Pereyra (Cochalo) <brayan@colosa.com>
-     * @copyright Colosa - Bolivia
-     *
-     * @url POST /:projectUid/trigger
     * @status 201
     */
    public function doPostTrigger($projectUid, $request_data, $tri_title, $tri_description = '', $tri_type = 'SCRIPT', $tri_webbot = '', $tri_param = '')
--- a/workflow/engine/src/ProcessMaker/Services/Api/Project/TriggerWizard.php
+++ b/workflow/engine/src/ProcessMaker/Services/Api/Project/TriggerWizard.php
@@ -67,12 +67,12 @@ class TriggerWizard extends Api

    /**
     * @url POST /:prj_uid/trigger-wizard/:lib_name/:fn_name
-     *
+     * @access protected
+     * @class AccessControl {@permission PM_FACTORY}
     * @param string $prj_uid      {@min 32}{@max 32}
     * @param string $lib_name
     * @param string $fn_name
     * @param array  $request_data
-     *
     * @status 201
     */
    public function doPostTriggerWizard($prj_uid, $lib_name, $fn_name, $request_data)
--- a/workflow/engine/src/ProcessMaker/Services/Api/Project/Variable.php
+++ b/workflow/engine/src/ProcessMaker/Services/Api/Project/Variable.php
@@ -49,10 +49,10 @@ class Variable extends Api

    /**
     * @url POST /:prj_uid/process-variable
-     *
+     * @access protected
+     * @class AccessControl {@permission PM_FACTORY}
     * @param string $prj_uid      {@min 32}{@max 32}
     * @param array  $request_data
-     *
     * @status 201
     */
    public function doPostVariable($prj_uid, $request_data)
@@ -110,7 +110,8 @@ class Variable extends Api

    /**
     * @url POST /:prj_uid/process-variable/:var_name/execute-query
-     *
+     * @access protected
+     * @class AccessControl {@permission PM_FACTORY, PM_CASES}
     * @param string $prj_uid      {@min 32}{@max 32}
     * @param string $var_name
     * @param array  $request_data
@@ -132,7 +133,8 @@ class Variable extends Api

    /**
     * @url POST /:prj_uid/process-variable/:var_name/execute-query-suggest
-     *
+     * @access protected
+     * @class AccessControl {@permission PM_FACTORY, PM_CASES}
     * @param string $prj_uid      {@min 32}{@max 32}
     * @param string $var_name
     * @param array  $request_data
--- a/workflow/engine/src/ProcessMaker/Services/Api/Project/WebEntry.php
+++ b/workflow/engine/src/ProcessMaker/Services/Api/Project/WebEntry.php
@@ -72,10 +72,10 @@ class WebEntry extends Api

    /**
     * @url POST /:prj_uid/web-entry
-     *
+     * @access protected
+     * @class AccessControl {@permission PM_FACTORY}
     * @param string $prj_uid      {@min 32}{@max 32}
     * @param array  $request_data
-     *
     * @status 201
     */
    public function doPostWebEntry($prj_uid, array $request_data)
--- a/workflow/engine/src/ProcessMaker/Services/Api/Project/WebEntryEvent.php
+++ b/workflow/engine/src/ProcessMaker/Services/Api/Project/WebEntryEvent.php
@@ -89,11 +89,10 @@ class WebEntryEvent extends Api

    /**
     * @url POST /:prj_uid/web-entry-event
+     * @access protected
     * @class AccessControl {@permission PM_FACTORY}
-     *
     * @param string $prj_uid      {@min 32}{@max 32}
     * @param array  $request_data
-     *
     * @status 201
     */
    public function doPostWebEntryEvent($prj_uid, array $request_data)