cancel
Showing results for 
Search instead for 
Did you mean: 

Activiti-Explorer LDAP Group not set so Manage sec missing

rangoo
Champ in-the-making
Champ in-the-making
Activiti Explorer( Activiti v5.12) authentication worked, but Groups are not set. I overrode following methods of GroupEntityManager.

findGroupByQueryCriteria(GroupQueryImpl query, Page page)
findGroupsByUser(String userId)
findGroupCountByQueryCriteria(GroupQueryImpl  query)

Seems like Explorer app is not calling any of these methods. Am I missing something?


<bean id="processEngineConfiguration" class="org.activiti.spring.SpringProcessEngineConfiguration">
     <property name="dataSource" ref="dataSource" />
     <property name="transactionManager" ref="transactionManager" />
     <property name="databaseSchemaUpdate" value="true" />
     <property name="jobExecutorActivate" value="true" />
   <property name="customSessionFactories">
         <list>
            <bean class="com.vv.ldap.LDAPUserManagerFactory">
               <constructor-arg ref="ldapConnectionParams" />
            </bean>
            <bean class="com.vv.ldap.LDAPGroupManagerFactory">
               <constructor-arg ref="ldapConnectionParams" />
            </bean>
         </list>
      </property>
    <property name="customFormTypes">
      <list>
        <bean class="org.activiti.explorer.form.UserFormType"/>
        <bean class="org.activiti.explorer.form.ProcessDefinitionFormType"/>
        <bean class="org.activiti.explorer.form.MonthFormType"/>  
      </list>
    </property>
  </bean>
   <bean id="ldapConnectionParams"
      class="com.ihc.ldap.LDAPConnectionParams">
      <property name="ldapServer" value="localhost" />
      <property name="ldapPort" value="10389" />
      <property name="ldapUser" value="uid=admin,ou=system" />
      <property name="ldapPassword" value="secret" />
   </bean>


UPDATE: Issue resolved with these 2 steps, but a question

1) I have to overide this method as well
        
@Override
    public GroupQuery createNewGroupQuery() {
          return new GroupQueryImpl(Context.getProcessEngineConfiguration().getCommandExecutorTxRequired());
     }

2) I modified my LDAP group from cn=Admin to cn=admin


Question: How can I configure more roles in addition to user & admin to have more selective access to Activiti-Explorer?
1 REPLY 1

frederikherema1
Star Contributor
Star Contributor
Explorer only uses those 2 roles. If I remember correctly, the roles are only used in the MenuBar, to show or hide admin-features. If you want to make certain features work based on other roles, you'll have to alter the activiti-explorer sources and build you're own jar to use in the web app. You could, for example, use your custom logic in the menu-bars to show or hide options to users.