Manage tab not appearing for ldap user

[ganeshr]

I dont find Manage tab when login to Activiti explorer with ldap user. To display groups for user I have set group type by default as 'assignment' so that groups are getting displayed but Manage tab is not displaying. Any suggestion on how to display both Manage tab and groups displayed in Activiti explorer when login with ldap user?

[jbarrez]

The user needs to have 'admin' as security-role.

[ganeshr]

The code:
List<Group> groups = identityService.createGroupQuery().groupMember(user.getId()).list();
      for (Group group : groups) {
        if (Constants.SECURITY_ROLE.equals(group.getType())) {
          loggedInUser.addSecurityRoleGroup(group);
          if (Constants.SECURITY_ROLE_USER.equals(group.getId())) {
            loggedInUser.setUser(true);
          }
          if (Constants.SECURITY_ROLE_ADMIN.equals(group.getId())) {
            loggedInUser.setAdmin(true);
          }
        } else {
          loggedInUser.addGroup(group);
        }
      }

is checking for only group type, if group type is security-role then only it is setting logged in user as admin. So if i make group type as security-role then groups are not getting added. so how to overcome this issue?

[jbarrez]

I'm not sure I understand your question … it's pretty cryptic.

But this line of code surely shows what should be done:


if (Constants.SECURITY_ROLE_ADMIN.equals(group.getId()))


[ganeshr]

First if condition  – 
        if (Constants.SECURITY_ROLE.equals(group.getType()))
is checking if group type is security-role or not. if group type is security-role then only it is checking for admin group id and setting logged in user as admin. But if group type is security-role then that group is not getting displayed in Queued tab for that user as group type is not 'assignment'.
So now i want to show the group in Queued tab in explorer and as well i want to display manage tab for managing activiti engine. how can we acheive this?

[frederikherema1]

This is the way explorer is implemented, only groups for "assignment" are displayed in the queued-tabs. If you want to have a group that is used for security-role and assignment, you'll have to alter the activiti-explorer source-code OR maybe have a virtual additional group (returned in your LDAP-implementation) that is suited for assignment…