Release notes

New available values

Task Delegation

For Teamwork, Efficiency, Performance, Enterprise and Scale editions only.

When a user is away, their assigned tasks normally stay invisible to everyone else. Task Delegation lets a designated delegate see and perform those tasks on behalf of the absent user, without reassigning them, and keeps full traceability of who acted.

This feature is delivered through a new Enterprise edition Bonita User Application that supersedes the existing Bonita User Application and adds the user Delegations page. After an update the two coexist until you remove the previous one (see the migration notes below). The Enterprise edition Bonita Administrator Application is also updated to add the admin Delegations page (under BPM).

For how to set up and use delegation, see Delegations (end users) and Delegations administration (organization-wide management).

What this version includes

  • Self-service delegation setup: each user picks a delegate, an absence period, and the processes to cover.

  • Organization-wide delegation management for administrators.

  • A date-driven status model: Active, Scheduled, or Expired.

  • A dedicated view of the tasks delegated to you, with execution on behalf of the absent user and full audit traceability.

  • Programmatic management of delegation rules through the new Delegation REST API (delegation/rule and delegation/task resources).

On a fresh installation, the Enterprise edition user application is installed automatically and both admin and user Delegations pages are available. No further action is required.

Migration notes

User Application

When updating from a previous Bonita version, your existing user application is kept and the new Enterprise edition user application is added alongside it, so the two applications coexist. If you use Bonita User Application, a manual step is required to finish the setup, depending on your situation:

You did not customize the Bonita User Application

Using the Applications page of Bonita Administrator Application, delete the previous Bonita User Application (app token userAppBonita) and keep the Enterprise edition (app token userAppEEBonita).

You customized the Bonita User Application and want to keep it as is

Using the Application editor of Bonita Administrator Application, edit your custom user application to add the user Delegations page (page-user-delegation) to your custom user application’s menu entries.

When updating a project from a previous Bonita version in Bonita Studio, if you were using the Bonita User Application, depending on your situation, you have to do one of the following:

You did not customize the Bonita User Application

In the Extensions view of your project, remove Bonita User Application. Then in the welcome page, in Resources, click on Import Bonita User Application (this imports the new Enterprise edition).

You customized the Bonita User Application and want to keep it as is

In the application descriptor of your custom user application, add the user Delegations page (page-user-delegation) to your application’s menu entries.

Administrator Application

The Bonita Administrator Application is updated in place (no new application was introduced).

When updating from a previous Bonita version using the Application editor, edit the Bonita Administrator Application menu to add a new Delegations menu entry under BPM targeting the admin Delegations page (page-admin-delegation).

When updating a project from a previous Bonita version in Bonita Studio, if you were using the Bonita Administrator Application, depending on your situation, you have to do one of the following:

You did not customize the Bonita Administrator Application

You have nothing to do.

You customized the Bonita Administrator Application

In the application descriptor of your custom admin application, add a new Delegations menu entry under BPM targeting the admin Delegations page (page-admin-delegation).

This release ships updated versions of the provided REST API dynamic authorization rules. The task endpoints' rules TaskPermissionRule and TaskExecutionPermissionRule are updated so that an active delegate is granted access to the delegated tasks, and a new DelegationPermissionRule secures the delegation endpoints (delegation/rule and delegation/task), with the matching entries added to dynamic-permissions-checks.properties.

If you customized any of the provided authorization rules, you need to update your custom rules to re-apply your changes on top of the new versions of those rules after upgrading (otherwise the delegation feature will not work). See Dynamic authorization checking.

Known limitations

Business data (BDM) access is controlled separately from delegation. If a task form reads business data, the delegate must have the same BDM access rights as the delegator to open the form, and delegation does not grant them automatically. If the delegate gets an access error on a form, an administrator can assign the appropriate permissions (e.g. through profiles or groups) so the delegate can open the task forms. See Delegations.

Notable changes

User Application process list migrated to Svelte

The provided process list page of the Bonita User Application has been re-implemented with the Svelte framework, replacing the previous React implementation. Existing customizations that target the page through application descriptors continue to work; teams that have forked the page source should port their changes to the new Svelte codebase.

The full dependency list for Svelte-based provided pages is available at List of Svelte pages dependencies.

Involvement APIs now include active delegates

As part of Task Delegation, ProcessAPI.isInvolvedInProcessInstance(userId, processInstanceId) and ProcessAPI.isInvolvedInHumanTaskInstance(userId, humanTaskInstanceId) now also return true when the user is an active delegate of the task’s assignee in a process covered by an active delegation, in addition to the existing cases (case started, task assigned, pending, or performed). Code that calls these methods outside authorization, for example to display who is involved in a case, will now include active delegates.

New REST API resources

Several REST resources were added to support the Task Delegation feature:

  • delegation/rule: create, search, update, and delete delegation rules. A regular user manages their own rule; an administrator can manage any user’s rule. Subscription editions only.

  • delegation/task: read-only; searches the tasks the caller can act on through an active delegation. Subscription editions only.

  • GET /API/bpm/processName: read-only; searches process deployment information grouped by name and display name, returning one entry per distinct name with its deployed versions. Available in any edition.

  • GET /API/identity/userSummary: read-only; returns a lightweight, paginated list of users (id, user name, first name, last name, and job title) for user pickers, without the full identity/user payload. Available in any edition.

Support matrix changes

Deprecations and removals

API deprecations

API removals

Custom component changes

Configuration changes

Bug fixes

Fixes in Bonita 2026.2-b1 (2026-06-15)

  • BPA-567 - OIDC callback fails with IllegalArgumentException - login never completes

  • Several dependencies updated