topic Re: Use own User/Group-tables in Alfresco Archive

Use own User/Group-tables

antje — Wed, 06 Oct 2010 13:03:44 GMT

Is there a possibility to use our own user/role-tables and check the tasklist against those tables instead the activiti-tables?Best regardsAntje

Re: Use own User/Group-tables

falko_menge — Wed, 06 Oct 2010 16:32:55 GMT

For storing users and groups in some external system, you can exchange the IdentitySession by an own implementation, e.g.:


ProcessEngineConfiguration processEngineConfiguration = new ProcessEngineConfiguration();
Map<Class< ? >, SessionFactory> sessionFactories = processEngineConfiguration.getSessionFactories();
sessionFactories.put(IdentitySession.class, new MyIdentitySessionFactory());
ProcessEngine processEngine = processEngineConfiguration.buildProcessEngine();

with:


public class MyIdentitySessionFactory implements SessionFactory {

  public Session openSession() {
    return new MyIdentitySession();
  }

}

If you are using Spring, you may want to extend the ProcessEngineFactoryBean to do this configuration for you.

Re: Use own User/Group-tables

antje — Thu, 07 Oct 2010 08:59:30 GMT

We are using Spring, but the ProcessEngineFactoryBean only has an IdentityService, no IdentitySession. What`s the difference between those classes and (how) do they work together?
How can I give a IdentitySession into the configuration with spring?

Re: Use own User/Group-tables

jbarrez — Thu, 07 Oct 2010 09:42:23 GMT

As Falko stated, you will need to extend the ProcessEngineFactoryBean and use the code Falko posten. The fact that the processEngineFactoryBean doesnt support it, is a bug.

Re: Use own User/Group-tables

falko_menge — Fri, 05 Nov 2010 08:13:01 GMT

Re: Use own User/Group-tables

akakunin — Sat, 06 Nov 2010 10:49:52 GMT

Thanks Falko! Your code sample works exactly like it should work!

Re: Use own User/Group-tables

hlux — Wed, 13 Apr 2011 14:05:33 GMT

Hello,

I'm trying to achieve the same thing.
I'm using activiti 5.4.

My approach was to add a CustomIdentitySessionFactory to the SpringProcessEngineConfiguration


<bean id="processEngineConfiguration" class="org.activiti.spring.SpringProcessEngineConfiguration"> 
    <property name="dataSource" ref="dataSource" />
    <property name="transactionManager" ref="transactionManager" /> 
    <property name="databaseSchemaUpdate" value="true" /> 
    <property name="jobExecutorActivate" value="false" />
    <property name="dbCycleUsed" value="true" />
    <property name="customSessionFactories">
    <list>
      <bean class="de.hlux.activiti.custom.spring.CustomIdentitySessionFactory"></bean>
    </list>
    </property> 
  </bean>


public class CustomIdentitySessionFactory implements SessionFactory {

 public Session openSession() {
  return (Session) new CustomIdentitySession();
 }

 public Class<?> getSessionType() {
  return IdentitySession.class;
 }

}

This works so far.
The thing I'd like some help with is to find the best way to inject the second datasource.

ProcessConfigurationImpl uses the following code to create a SqlSessionFactory


protected void initSqlSessionFactory() {
    if (sqlSessionFactory==null) {
      InputStream inputStream = null;
      try {
        inputStream = ReflectUtil.getResourceAsStream("org/activiti/db/ibatis/activiti.ibatis.mem.conf.xml");

        // update the jdbc parameters to the configured ones…
        Environment environment = new Environment("default", transactionFactory, dataSource);
        Reader reader = new InputStreamReader(inputStream);
        XMLConfigBuilder parser = new XMLConfigBuilder(reader);
        Configuration configuration = parser.getConfiguration();
        configuration.setEnvironment(environment);
        configuration.getTypeHandlerRegistry().register(VariableType.class, JdbcType.VARCHAR, new IbatisVariableTypeHandler());
        configuration = parser.parse();

        sqlSessionFactory = new DefaultSqlSessionFactory(configuration);

      } catch (Exception e) {
        throw new ActivitiException("Error while building ibatis SqlSessionFactory: " + e.getMessage(), e);
      } finally {
        IoUtil.closeSilently(inputStream);
      }
    }
  }

That is used within the DbSqlSessionFactory


      dbSqlSessionFactory = new DbSqlSessionFactory();
      dbSqlSessionFactory.setDatabaseType(databaseType);
      dbSqlSessionFactory.setIdGenerator(idGenerator);
      dbSqlSessionFactory.setSqlSessionFactory(sqlSessionFactory);
      dbSqlSessionFactory.setDbIdentityUsed(isDbIdentityUsed);
      dbSqlSessionFactory.setDbHistoryUsed(isDbHistoryUsed);
      dbSqlSessionFactory.setDbCycleUsed(isDbCycleUsed);
      addSessionFactory(dbSqlSessionFactory);

At the moment I think, that my CustomIdentitySession should make use of a DbSqlSessionFactory,
but that of course needs to have the datasource where the users and groups are stored.

I'm not familiar enough with the design patterns used and would like to hear you opinion on my approach.
Maybe I'm completely wrong here.

greetings
hlux

Re: Use own User/Group-tables

mondhs — Tue, 09 Apr 2013 10:40:05 GMT

Hlux,

Thanks for the sample it was good starting point to integrate internal user management service to Acitviti.

I used same idea that CustomUserEntityManagerFactory factory creates CustomUserEntityManager. CustomUserEntityManager is wrapper for CustomUserDao. To represent implementaiton is really required long post. So I pushed sample project to github:https://github.com/mondhs/activiti-CustomUserManagement. Most important classes:
* org.activiti.custom.spring.CustomUserEntityManager
* org.activiti.custom.spring.CustomUserEntityManagerFactory
* org.activiti.custom.security.UserDao

Also I wanted that it would be used same user as it is already logged in using custom login form. In order to do that I needed implement:
* org.activiti.custom.explorer.ui.login.CustomDefaultLoginHandler that adapts org.activiti.custom.security.CurrentUserService results

spring configuration could be found in src/main/resources/META-INF/spring/custom-user-management-beans.xml

Similar topics:
* Exchange IdentityService (or other services) http://forums.activiti.org/en/viewtopic.php?f=4&t=427
* Use own User/Group-tables: http://forums.activiti.org/en/viewtopic.php?f=3&t=345
* How to Use own User Maangement instead of Activiti provided http://forums.activiti.org/en/viewtopic.php?f=6&t=6155

Re: Use own User/Group-tables

jbarrez — Wed, 10 Apr 2013 14:19:23 GMT

Thanks for taking the time to posts this. Really valuable!

Re: Use own User/Group-tables

arashmarzi — Mon, 12 Aug 2013 01:57:31 GMT

Here's probably a really basic question but Im a beginner to using Activiti both programmatically and through explorer. I am trying to achieve the same goal as discussed in this thread (essentially adding a custom authentication system to replace ldap and hardcoding users), though apart from like creating a java project and writing up the code for it I am not sure how to deploy it in explorer. For example, if i was to use the code from mondhs's project then how would I use it in coordination with activiti explorer?

Thanks for any guidance

Re: Use own User/Group-tables

frederikherema1 — Mon, 12 Aug 2013 13:54:23 GMT

Not sure what "mondhs's" project is, but here is my 2 cents:
- The identity-managent integration is actually done in the activiti-engine itself, not in the activiti-explorer.
- Since activiti-explorer uses the engine, any "custom" identity-management configured in the engine will be used by the explorer.
- If you have an external system that does the user/group management that is not accessible through a Java-api, you should create the solution as described above, using java-code that does REST/HTTP or whatever calls you need to communicate with the system.

Re: Use own User/Group-tables

arashmarzi — Mon, 12 Aug 2013 19:18:52 GMT

"mondhs's project" is in reference to the git project posted by user mondhs earlier in this thread https://github.com/mondhs/activiti-CustomUserManagement

Ok, I understand that activiti engine and activiti explorer are 2 different components. Are you implying that if i want to create my own identity management component via Activiti Designer in Eclipse then I have to change activiti engine, But then how do I incorporate that into the original activiti engine? After which, how to i incorporate that into explorer? How do would I follow through with the basics? The user guide is clear and comprehensive on the necessary code but not 100% clear of the integration of new code into the existing activiti engine/explorer. If you can give me a generic step by step as to integrate new projects into the engine or pinpoint the section in the user guide that states it, that would be extremely helpful.

Re: Use own User/Group-tables

frederikherema1 — Wed, 14 Aug 2013 11:56:37 GMT

Activiti explorer is just a webapp, containing the activiti engine. The engine is configured using a spring-context file (src/main/webapp/WEB-INF/applicationContext.xml). Any customisations to core-services (like the user-management) should be plugged into that configuration.

So just take the activiti-explorer web app, add your custom jar's in it and wire everything in in the config-file and you're ready to go.

Re: Use own User/Group-tables

franck102 — Fri, 10 Jan 2014 16:08:33 GMT

Trying to solve the same issue, I understand how to create the proper ProcessEngine but how can I get it picked up by the ProcessEngines static class?

ProcessEngines.getDefaultProcessEngine is used all over the place, and I don't see how to override its default engine.
The best I can come up with is

ProcessEngines.init()
myEngine = <build my own engine>
ProcessEngines.registerProcessEngine(myEngine);

… and I will need to duplicate quite a bit of the code in ProcessEngines.init() to "<build my own engine>"

Any better suggestion?
Thanks!
Franck

Re: Use own User/Group-tables

frederikherema1 — Wed, 15 Jan 2014 06:28:44 GMT

Any process engine you create (using the build()) registers itself with the ProcessEngines static class. This is usefull in case you bootstrap your engine using Spring or programatically. This can be done before or after a call to the init(), it doesn't matter, as long as there is no activiti.cfg.xml file on your class path.

In case you're using a plain processEngine, bootstrapped from the activiti.cfg.xml file, it's best to give the process engine the name "default". This way, when calling ProcessEngines.init(), the classpath will be scanned for the config file, and your config will be used. So IMHO, there is no need to call the register yourself, nor is it needed to duplicate any init() code…

Re: Use own User/Group-tables

cicpa — Fri, 21 Mar 2014 11:39:30 GMT

I'm using activiti 5.14 engine and i need to custom identityService.
I don't need activiti explore and i want to use only
ManagementService, RepositoryService, TaskService and RuntimeService
My goal is to override many methods as possible.
From my investigation i have noted that when i call

taskCandidateUser("kermit")

the findGroupsByUser(String userId) was called.

There are other points in the services ManagementService, RepositoryService, TaskService and RuntimeService when an Identity (UserIdentityManager/GroupIdentityManager) service was called.

Re: Use own User/Group-tables

trademak — Fri, 21 Mar 2014 15:55:38 GMT

And what's your question? taskCandidateUser is the only special case where it also looks for groups of a user. The other ones are really straightforward lookups of a user or group.

Re: Use own User/Group-tables

cicpa — Mon, 24 Mar 2014 08:48:50 GMT

Thanks for your reply.
Yes my question was if taskCandidateUser are the only case where identity service is used in runtime and task service.

Re: Use own User/Group-tables

harishashim — Sat, 02 Jan 2016 12:21:07 GMT

This question is very popular with Activiti. So I am proud the be the first guy in 2016 to ask this question again!

All my codes relevant to this question is in https://github.com/jbarrez/spring-boot-with-activiti-example/issues/5#issuecomment-168306116

In short I tried the codes as in mondhs solution in this (Activiti Forum) thread. Basically doing injection using XML configuration file for spring. Does not work for me. And then I find discussion in the above github link. So instead of using XML, I tried to do the bean injection using code. Still does not work.

My question:

If I configure my activiti-spring-boot with XML as in mondhs
https://github.com/mondhs/activiti-CustomUserManagement/blob/master/src/main/resources/META-INF/spring/custom-activiti-beans.xml

And then implemented all the user and group manager, factory, classes etc. Not that much different than mondhs implementation of them.

And then I use this code to manually create user and group.

    @Bean
    InitializingBean usersAndGroupsInitializer(
            final IdentityService identityService) {

        final Logger log = LoggerFactory.getLogger(this.getClass());

        return new InitializingBean() {
            public void afterPropertiesSet() throws Exception {

                Group group = identityService.newGroup("user");
                group.setName("users");
                group.setType("security-role");
                identityService.saveGroup(group);

                User admin = identityService.newUser("rootadmin");
                admin.setPassword("admin");
                identityService.saveUser(admin);

            }
        };
    }

And then discovered that the above code create user and group in act_id_user and act_id_group table.

What should then be my conclusion? Can I conclude that my customized identity service using own user and group table is not working?

Re: Use own User/Group-tables

jbarrez — Mon, 04 Jan 2016 20:26:00 GMT

Now the christmas holidays are over, there will be more people being able to answer 😉

I've responded to the github comments, can we discuss there further (easier for code). Would be handy if you have some executable code that I can give a try.