topic Re: Activiti Designer: Separation of Duty and Binding of Duty in Alfresco Archive

Activiti Designer: Separation of Duty and Binding of Duty

forschungsstude — Sat, 01 Dec 2012 18:05:43 GMT

Hello,I created a process at Activiti Designer.Now I want to test "Separation of Duty" and "Binding of Duty", but I have no idea where I can configure that.Need help pls.

Re: Activiti Designer: Separation of Duty and Binding of Duty

ronald_van_kuij — Sat, 01 Dec 2012 23:45:55 GMT

Sorry, but I have no idea what you mean. Can you elaborate?

Re: Activiti Designer: Separation of Duty and Binding of Duty

forschungsstude — Sun, 02 Dec 2012 07:37:23 GMT

Hello,

Separation of duties is the concept of having more than one person required to complete a task.

Binding of Duty constraints deﬁne that the same subject (or role) who performed a certain task t1 must also perform
a corresponding bound task t2.

Is there a possibility to configure something like that at Activiti (Designer)?

Re: Activiti Designer: Separation of Duty and Binding of Duty

forschungsstude — Mon, 03 Dec 2012 18:16:31 GMT

Hello,

is the following description true?

In Activiti are 2 attributes that describe person/group that is responsible for the task. Both of them are set when task is being created and indicate, for each users it should be displayed.

activiti:assignee identifies single user that is assigned to the task.
activiti:candidateGroups identifies groups of users that claim the task.

thx.

Sabine

Re: Activiti Designer: Separation of Duty and Binding of Duty

trademak — Tue, 04 Dec 2012 07:51:48 GMT

Hi,

That's right. And you can also define candidateUsers which are users that can claim the task.

Best regards,

Re: Activiti Designer: Separation of Duty and Binding of Duty

forschungsstude — Tue, 04 Dec 2012 12:35:11 GMT

Hello,

thanks.
When I should apply "assignee" and when "candidateUsers".

To configure "Binding of Duty" I can apply "assignee" so the single user can execute all tasks. Or?

Can I define "Separation of Duty"?

Now I found a description –> page 40 <http://www.aniketos.eu/sites/default/files/deliverables/Aniketos%20D5.2%20Initial%20ANIKETOS%20platform%20integration.pdf>

Re: Activiti Designer: Separation of Duty and Binding of Duty

forschungsstude — Wed, 05 Dec 2012 09:37:55 GMT

Hello,

I have install "Activiti Designer" but under "Palette" ther is no "Security" and also no "BindingOfDuty" and "SeparationOfDuty".

Need help pls.

Sabine

Re: Activiti Designer: Separation of Duty and Binding of Duty

udoderk — Thu, 06 Dec 2012 09:04:37 GMT

Hello,

I have install "Activiti Designer" but under "Palette" ther is no "Security" and also no "BindingOfDuty" and "SeparationOfDuty".

Need help pls.

Sabine

The Activiti Designer is a Tool to model a business process, it has no business process templates a-ka "BindingOfDuty" or "SeparationOfDuty".
you'd have to model these processes 8-) themselves.

Re: Activiti Designer: Separation of Duty and Binding of Duty

udoderk — Thu, 06 Dec 2012 09:10:35 GMT

Hello,

….

Now I found a description –> page 40 <http://www.aniketos.eu/sites/default/files/deliverables/Aniketos%20D5.2%20Initial%20ANIKETOS%20platform%20integration.pdf>

Please read everything, not just page 40.

Notice that:
1. (page 74, pdf file; page 62 in document)

4.2 Aniketos environment components
4.2.1 Service Composition Framework
4.2.1.1 Implementation
The service composition framework is basically composed of the Activiti Designer [8] and of three
external plug-ins. Two of them called eu.aniketos.wp5.components.scf and
eu.aniketos.wp5.components.scf.implementation contain the discovery and the planning mechanism
and handle the interactions with the other Aniketos components. The other one called
org.activiti.desginer.elsag contains the code needed for the extension of the Activiti Designer. This
includes the definition of new user interfaces in order to let the developer to easily define the type and
the parameters of the desired service, and the calls to the methods exposed by the
eu.aniketos.wp5.components.scf.implementation plug-in.

And 2:

Overall, SecureBPM enables the specification of these security properties at a fine granular level. For example, separation of duty and binding of duty can restrict individual permissions (e. g., completing a task requires two clerks or one manager) rather than restricting the whole task…
Figure 4 illustrates the SecureBPMN modelling support in an extended version of the Activiti BPMN Designer (http://www.activiti.org) showing a simple travel approval process. While we provide a graphical notation for the separation of duty property (e.g., the blue “box” between the tasks “Request Travel” and “Approve Budget”, we do not provide a graphical notation for the role-based permissions….
…

In more detail, we extended the BPMN meta-model. Figure 3 shows the core of core of SecureBPM (the black classes) as well as the connection points to the BPMN meta-model (the blue classes represent classes from the BPMN meta-model).

[img]http://img255.imageshack.us/img255/120/activitionaniketos.png[/img]

Re: Activiti Designer: Separation of Duty and Binding of Duty

forschungsstude — Thu, 06 Dec 2012 19:26:48 GMT

OK ok, you've made your point!

How can I define Separation of Duty?

Re: Activiti Designer: Separation of Duty and Binding of Duty

udoderk — Thu, 06 Dec 2012 21:09:05 GMT

OK ok, you've made your point!

How can I define Separation of Duty?

The workflow pattern Separation of Duties is not supported by BPMN. Thus with standard BPMN Modeling Tools (a-ka Activiti Modeller/Designer etc.) you have no chance to realize it. You need the Tools, that have the BPMN extensions like found above or this or those

Re: Activiti Designer: Separation of Duty and Binding of Duty

forschungsstude — Fri, 07 Dec 2012 13:19:59 GMT

:idea:

Thank you.

Re: Activiti Designer: Separation of Duty and Binding of Duty

ronald_van_kuij — Fri, 07 Dec 2012 16:46:32 GMT

You can implement this probably with some simple java code. Just e.g. store assignments in process variables and as an 'assignment expression' call this java code. It decides the next assignee by e.g. looking previous assignees…

It is the 'extension mechanism' for Activiti.