Best way to role management..

[jcosano]

this is my idea: I would manage users, functional role and organizational role
BPMN Process: Associate tasks with functional role
After, I would have user associates with organizational role.
Sample:
Process SAMPLE: TASK1 (FR1), TASK2 (FR2)
OR1= FR1 & FR2
OR2= FR2
Peter is OR1, Mike is OR2
Target: peter can do task1, peter and mike can do task2

How can implement this user management with activiti?
Relation between task with functional role I think that is goberned by processdefinition.
But, relation between user & organizational role? and organizational role & functional role?

Is a wrong idea? My target is make easy user/permission manegement for doing work.

What do you think about this? Which is best way for implement it?

Thanks!

[jcosano]

I'll implement my idea using LDAP

I see:

LDAP integration
    *  Identity component pluggability (5.0)


Which steps should be followed to connect Activiti with LDAP?

* For authentication
* For authorization

summary:
Don't use: ACT_ID_GROUP, ACT_ID_USER, ACT_ID_MEMBERSHIP  and use LDAP to replace it.

thanks!!!