topic Re: Role Based access to deployed process. in Alfresco Archive

Role Based access to deployed process.

kingbee888 — Thu, 30 Jan 2014 16:38:56 GMT

Hi Is there a way to restrict who can see a specific deployed process? For example only the Sales group can see the process "Create new Sales lead" and only a member of the desktop group can see the process "Deploy new laptop". But if you're apart of both groups, you see both processes.Thanks in a

Re: Role Based access to deployed process.

martin_grofcik — Fri, 31 Jan 2014 08:29:42 GMT

Hi.
You can try to use RepositoryService method


  /**
   * Only selects process definitions which given userId is authoriezed to start
   */
  ProcessDefinitionQuery startableByUser(String userId);

Regards
Martin

Re: Role Based access to deployed process.

raghuveer — Fri, 11 Jul 2014 10:55:57 GMT

/**
* Only selects process definitions which given userId is authoriezed to start
*/
ProcessDefinitionQuery startableByUser(String userId);

can you pls elaborate your answer….
If you can share sample implementation for this method it would be helpful

Re: Role Based access to deployed process.

martin_grofcik — Mon, 14 Jul 2014 05:02:31 GMT

Hi,

The good example is org.activiti.examples.bpmn.authorization.StartAuthorizationTest#testPotentialStarter in activiti sources.
example of usage:


     ProcessDefinition potentialStarter = repositoryService.createProcessDefinitionQuery().processDefinitionKey("potentialStarter").startableByUser("user1").latestVersion().singleResult();

Regards
Martin

Re: Role Based access to deployed process.

raghuveer — Mon, 14 Jul 2014 12:22:31 GMT

Hi Martin,

tnks for your reply…actually i am making a rest call…and
i am using activiti:candidateStarterUsers…but it is not working…pls help

tnks and regards,
Raghuveer

Re: Role Based access to deployed process.

raghuveer — Mon, 14 Jul 2014 12:27:26 GMT

i am hardcoding kermit for CandidateStarerUsers…like this

<process id="potentialStarter" name="StartUp" isExecutable="true" activiti:candidateStarterUsers="kermit">

<startEvent id="theStart" />
<sequenceFlow id="flow1" sourceRef="theStart" targetRef="theEnd" />
<endEvent id="theEnd" />
</process>

but still the process can be started by anyone…pls help me to understand

tnks in advance
Raghuveer

Re: Role Based access to deployed process.

raghuveer — Mon, 14 Jul 2014 12:27:43 GMT

Re: Role Based access to deployed process.

raghuveer — Mon, 14 Jul 2014 12:28:21 GMT

Re: Role Based access to deployed process.

martin_grofcik — Tue, 15 Jul 2014 04:54:58 GMT

Hi,

From user guide:

NOTE that the authorization definition is NOT validated by the Activiti Engine in any way. This functionality is only meant for developers to ease the implementation of authorization rules in a web client.

Rest endpoint implementation needs to be changed.

Regards
Martin

Re: Role Based access to deployed process.

chittaranjan168 — Wed, 16 Jul 2014 06:39:31 GMT

Chittaranjan: Is it possible to provide a sample example for this?

Re: Role Based access to deployed process.

chittaranjan168 — Wed, 16 Jul 2014 06:43:27 GMT

How could I create a custom class for implementation of authorization rules in activiti-webapp-explorer2?. if possible upload some samples.