cancel
Showing results for 
Search instead for 
Did you mean: 

Process Definition Security

scolyer
Champ in-the-making
Champ in-the-making
I'm putting this in the developer forum because as far as I can tell this does not yet exist, but perhaps I have missed something.

It would seem that in activiti-explorer or using the java API for ProcessDefinitionQuery that results cannot be group or user dependent. There are many situations, particularly as Activiti would scale up where we don't want all users to see all process models.

Did I miss a way to handle this type of behavior? Or, is it going to be coming in Activiti?


Similarly, but perhaps I should start a new thread is Process security.

Let's say we wanted to report on vacation requests. If I wanted to see all of the vacation requests I took in the past year, I could query the history service to see the tasks assigned to me. I couldn't see the variables of these tasks, but just that the tasks were executed.

Suppose I write vacation request process information to my own data source. This way I could keep track of requests and the applicable dates requested or any other information. For reporting I could query on a given user.  However, what if what I really wanted would be to see the requests of all of the requests for people in my group so we could plan our vacations to not all be away at the same time. If I were to report off of my own data source I would then have to add all of the logic into each of these queries.
1 REPLY 1

ronald_van_kuij
Champ on-the-rise
Champ on-the-rise
I'm putting this in the developer forum because as far as I can tell this does not yet exist, but perhaps I have missed something.
That is not a 'valid' reason to post it here… user forum would have been as good

Did I miss a way to handle this type of behavior?
Maybe 😉 Did you try handeling it in your own ui? I'm partly kidding, but otoh, I'm not. The web/ui stuff of Activiti is not really meant for end-user applications afaik.

Or, is it going to be coming in Activiti?
There has been some discussion about this, but not concrete afaik

Regarding your other question. Domain data is often best stored in your application and queried there. The engine should take care of the flow of requests etc… so….