topic Re: Using roles and users of wepapp in Alfresco Archive

Using roles and users of wepapp

rnauruhn — Tue, 15 Feb 2011 17:10:23 GMT

Dear all,I am currently evaluating Activiti as to embed it as workflow engine in our existing application. Currently we have a hard coded workflow but with the number of companies which use it growing the need of customizable workflow(s) is also growing.While reading the user guide and the example c

Re: Using roles and users of wepapp

jbarrez — Thu, 17 Feb 2011 09:29:54 GMT

When using candidateGroups, you can use an expression which delegates the logic to some custom java code, eg. candidateGroups="${myLogic.resolveOrderParticipants}". Would that approach work ?

Regarding linking the identity management: you should replace the IdentitySession with your own implementation. There are a few threads on the forum that described how to do this.

Re: Using roles and users of wepapp

rnauruhn — Tue, 15 Mar 2011 20:35:02 GMT

When using candidateGroups, you can use an expression which delegates the logic to some custom java code, eg. candidateGroups="${myLogic.resolveOrderParticipants}". Would that approach work ?

Is myLogic one of my implemented logics? Is there any example available for this?

Regarding linking the identity management: you should replace the IdentitySession with your own implementation. There are a few threads on the forum that described how to do this.

If found a thread that helped me to create my own implementation. The users are no problem. But as we do not use groups but roles which result in a list of users only when they are in the context of an order this is a problem. The IdentitySession-Interface has some group related methods. As I don't know anything about the order when those methods are executed I am not sure how to implement this.

What I could do is to persist for each order the id of the ProcessInstance when the order is created (the process is also started at this time). If I could get the id of the process in the IdentitySession's methods I could also get my order. But this seems to be problem. Or could I solve this via "Context.getExecutionContext().getProcessInstance()"?

Re: Using roles and users of wepapp

jbarrez — Wed, 16 Mar 2011 11:11:23 GMT

Is myLogic one of my implemented logics? Is there any example available for this?

See http://activiti.org/userguide/index.html#apiExpressions

if found a thread that helped me to create my own implementation. The users are no problem. But as we do not use groups but roles which result in a list of users only when they are in the context of an order this is a problem. The IdentitySession-Interface has some group related methods. As I don't know anything about the order when those methods are executed I am not sure how to implement this.

Just throw an UnsupportedOperationException in those methods, you will see quickly which ones are used.

What I could do is to persist for each order the id of the ProcessInstance when the order is created (the process is also started at this time). If I could get the id of the process in the IdentitySession's methods I could also get my order. But this seems to be problem. Or could I solve this via "Context.getExecutionContext().getProcessInstance()"?

I don't get this, what exactly do you need? When you start the Process Instance, you can easily get the id back.

Re: Using roles and users of wepapp

rnauruhn — Wed, 16 Mar 2011 11:47:38 GMT

Just throw an UnsupportedOperationException in those methods, you will see quickly which ones are used.

To find the methods that are used is not the problem but to make to correct implementation is one. Let us take a look at "IdentitySession.findUsersByGroupId". This has to return the list of users for a specified group. As I mentioned above we don't have groups but roles. A role results in users only if it the context (the order) is available. That means that a lot of users have e.g. the role "client" but only when creating a new order (and so starting a new process for this order) alle participants of this order with the role "client" are the correct users for the requested role.

Maybe I have a misunderstanding and "IdentitySession.findUsersByGroupId" must not be seen in a context of a running process and is correct to return ALL user with the role "client" assigned. Maybe I have to implement my own logic to resolve roles in the order's context. My thinking was about a scenario where a task has a candidate group (which would be a candidate role for me) and the engine has to perform an action for all members by itself (e.g. sending an email). How shall the engine get the correct list of users as my implemtation of "IdentitySession.findUsersByGroupId" returns alls users with the role assigned (which is wrong).

I don't get this, what exactly do you need? When you start the Process Instance, you can easily get the id back.

This was my attempt to solve the problem above (to get the context which is an order) in the implementing methods of IdentitySession which are related to groups.

Re: Using roles and users of wepapp

ronald_van_kuij — Wed, 16 Mar 2011 16:35:55 GMT

Maybe I have to implement my own logic to resolve roles in the order's context.

This is the case and in the candidateGroups="${myLogic.resolveOrderParticipants}" you can also pass parameters like process variables or whatever so you are kind of in the 'context' then.