difference between security-role and assignment

[b_schnarr]

Hello at all,

when I create a new group, there are the two types security-role and assignment. The assignment type is clear, but I do not understand how to make use of the security-role groups.

I want to create several security-role groups, e.g. admin, users and modelers. Depending on the security-role group, users can see different elements in the activiti explorer. For example, users can´t see the model workspace section, modelers and admins can.

Is this possible with the security-role group concept?

Thanks and best regards
Ben

[trademak]

We use the security-role for the Activiti Explorer only. You can use it for your own custom web application as well of course. No other functionality is attached to security-role for the Activiti Engine.

Best regards,

[b_schnarr]

Thanks for your answer. It is very comfortable to work with those security roles, especially because they do not appear in the activiti explorer for assignment. Lets say I use LDAP Groups. LDAP does not distinguish between assignment and security role. How could I achieve this? Lets say I have a LDAP Group sales and a LDAP group admin. Is there a way that the explorer knows sales as assignment group and admin as security role?

Thanks for your help and best regards
Ben

[b_schnarr]

No replies anymore in this forum?

[frederikherema1]

You can extends the LDAP implementation in activiti and add additional 'fake' roles based on any data you have available.

[cshar]

Hi, I am stuck up on something same for my struts 2 web app that is using activiti as backend engine to define approval process. I would like to have a capability of adding roles and assigning permissions to those roles. I should be able to attach roles to the users accordingly. Could you please advise. Thanks!

[jbarrez]

You need to make the users part of a group (or more). In the process definitions, you us the 'candidateGroup' to assign a task to a group.
When the user logs in, get his/her groups and do a query with those groups for candidateGroup.