topic Re: Setting a daily quota for instances that anonymous account can start in Alfresco Archive

Setting a daily quota for instances that anonymous account can start

vasilnedev — Mon, 03 Aug 2015 08:44:15 GMT

Hi, I am developing a frontend app in AngularJS. What is the best way of setting a daily quota for the number of instances that a demo (or any) user can start? The demo user is anonymous and hence I am afraid of somebody attacking the Engine via my app.Thanks and regardsVasil

Re: Setting a daily quota for instances that anonymous account can start

vasile_dirla — Mon, 03 Aug 2015 09:10:06 GMT

Hi,

so you want to have a quota only for your client application (the one you are working on) or the quota should be global ? (which will affect all the client applications)

—-
Please note that a process could be started by a timer event. (and it could be configured in the process definition XML so you should do it in the engine globally in order to restrict the engine from creating too many instances.)

Re: Setting a daily quota for instances that anonymous account can start

vasilnedev — Mon, 03 Aug 2015 15:08:27 GMT

Hi,

I am looking for a global solution.

Thanks!

Re: Setting a daily quota for instances that anonymous account can start

pmsevestre — Fri, 07 Aug 2015 02:03:23 GMT

Two ways to to it:

1. Add a system task in your process that executes a query on Activiti´s historic data and allow/forbid it to continue

2. Create a global event listener that checks for the creation os new process instances and kill them on some condition.

Re: Setting a daily quota for instances that anonymous account can start

vasile_dirla — Sat, 08 Aug 2015 07:20:11 GMT

Thanks pmsevestre for your contribution;
I have some comments:
(killing a instance after it was created maybe is not a very nice solution since he want to prevent creation)

@ vasilnedev, since you want to prevent creation of process instances maybe you could put some code inside StartProcessInstanceCmd.java in order to prevent instance creation if quota is reached. (as pmsevestre said for the first solution, by checking the historic data)