User authorization to start processes based on their groups

[hamotahari]

Hi,
There is

ProcessDefinitionQuery.startableByUser(String userId)‍

to check if a special user is in the list of a process candidate start users.
How is it possible to check for candidate start groups?
I seek for somthing like:

ProcessDefinitionQuery.startableByGroups(Set<String> userGroups)‍

In fact I want to get the list of processes which the user can start them based on his/her membership in their candiate start groups.

Thanks a lot,
HM

[trademak]

Hi,

That's already how the startableByUser method works.
It also checks the groups the user is in and validates that against the candidate groups defined in the process authorization.

Best regards,

[hamotahari]

Thanks a lot.
But what if we use a customized identity manager? For example if we use LDAP users and groups?

[jbarrez]

If the manager for users/groups is correctly plugged, the candidate groups should come from LDAP.