How to make execute method of activiti engine secure with rest api calls.

[mahajanankur]

I am using activiti engines execute method in my application and calling it from a rest based service. But now anyone can execute it because my rest endpoints are not secured. Is there any way to make execute method secure so that only activiti's registered users (kermit and all other register users in ACT_ID_USER) can perform execute task. I have attached two screenshots with this (Execute method implementation and Rest Controller method).

Any help would be highly appreciated.

[jbarrez]

> now anyone can execute it because my rest endpoints are not secured.

That is completely up to you. Activiti REST ships with a very light security, but the idea is that you build your own layer around it.