topic Re: Manage tab not appearing for ldap user in Alfresco Archive

Manage tab not appearing for ldap user

ganeshr — Thu, 25 Oct 2012 07:01:25 GMT

I dont find Manage tab when login to Activiti explorer with ldap user. To display groups for user I have set group type by default as 'assignment' so that groups are getting displayed but Manage tab is not displaying. Any suggestion on how to display both Manage tab and groups displayed in Activiti

Re: Manage tab not appearing for ldap user

jbarrez — Thu, 25 Oct 2012 08:28:01 GMT

The user needs to have 'admin' as security-role.

Re: Manage tab not appearing for ldap user

ganeshr — Thu, 25 Oct 2012 08:36:44 GMT

The code:
List<Group> groups = identityService.createGroupQuery().groupMember(user.getId()).list();
      for (Group group : groups) {
        if (Constants.SECURITY_ROLE.equals(group.getType())) {
          loggedInUser.addSecurityRoleGroup(group);
          if (Constants.SECURITY_ROLE_USER.equals(group.getId())) {
            loggedInUser.setUser(true);
          }
          if (Constants.SECURITY_ROLE_ADMIN.equals(group.getId())) {
            loggedInUser.setAdmin(true);
          }
        } else {
          loggedInUser.addGroup(group);
        }
      }

is checking for only group type, if group type is security-role then only it is setting logged in user as admin. So if i make group type as security-role then groups are not getting added. so how to overcome this issue?

Re: Manage tab not appearing for ldap user

jbarrez — Fri, 26 Oct 2012 06:12:30 GMT

I'm not sure I understand your question … it's pretty cryptic.

But this line of code surely shows what should be done:


if (Constants.SECURITY_ROLE_ADMIN.equals(group.getId()))

Re: Manage tab not appearing for ldap user

ganeshr — Fri, 26 Oct 2012 06:37:24 GMT

First if condition –
if (Constants.SECURITY_ROLE.equals(group.getType()))
is checking if group type is security-role or not. if group type is security-role then only it is checking for admin group id and setting logged in user as admin. But if group type is security-role then that group is not getting displayed in Queued tab for that user as group type is not 'assignment'.
So now i want to show the group in Queued tab in explorer and as well i want to display manage tab for managing activiti engine. how can we acheive this?

Re: Manage tab not appearing for ldap user

frederikherema1 — Mon, 29 Oct 2012 10:37:06 GMT

This is the way explorer is implemented, only groups for "assignment" are displayed in the queued-tabs. If you want to have a group that is used for security-role and assignment, you'll have to alter the activiti-explorer source-code OR maybe have a virtual additional group (returned in your LDAP-implementation) that is suited for assignment…