# Flowable-rest add group privilege check

**URL:** https://forum.flowable.org/t/flowable-rest-add-group-privilege-check/3333
**Category:** Flowable Engine
**Created:** [January 28, 2019, 1:02pm UTC](https://forum.flowable.org/t/flowable-rest-add-group-privilege-check/3333 "2019-01-28T13:02:17Z")
**Posts on this page:** 1
**Page:** 1

<div class="post-metadata">

### Author: ![xcaptain](https://yyz1.discourse-cdn.com/flex035/user_avatar/forum.flowable.org/xcaptain/32/1286_2.png) [@xcaptain](https://forum.flowable.org/u/xcaptain)
#### Post date: [January 28, 2019, 1:02pm UTC](https://forum.flowable.org/t/flowable-rest-add-group-privilege-check/3333/1 "2019-01-28T13:02:17Z")

</div>

Currently, `flowable-rest` api checks user’s privilege based on user id, see: [https://github.com/flowable/flowable-engine/blob/master/modules/flowable-rest/src/main/java/org/flowable/rest/security/BasicAuthenticationProvider.java#L54](https://github.com/flowable/flowable-engine/blob/master/modules/flowable-rest/src/main/java/org/flowable/rest/security/BasicAuthenticationProvider.java#L54)

How about adding group privilege check, for example, a group has the privilege to the rest api, so all the users in the group can access rest api.