nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

difference between security-role and assignment

b_schnarr

Hello at all,

when I create a new group, there are the two types security-role and assignment. The assignment type is clear, but I do not understand how to make use of the security-role groups.

I want to create several security-role groups, e.g. admin, users and modelers. Depending on the security-role group, users can see different elements in the activiti explorer. For example, users can´t see the model workspace section, modelers and admins can.

Is this possible with the security-role group concept?

Thanks and best regards
Ben

Find more posts tagged with

Comments

trademak

We use the security-role for the Activiti Explorer only. You can use it for your own custom web application as well of course. No other functionality is attached to security-role for the Activiti Engine.

Best regards,

b_schnarr

Thanks for your answer. It is very comfortable to work with those security roles, especially because they do not appear in the activiti explorer for assignment. Lets say I use LDAP Groups. LDAP does not distinguish between assignment and security role. How could I achieve this? Lets say I have a LDAP Group sales and a LDAP group admin. Is there a way that the explorer knows sales as assignment group and admin as security role?

Thanks for your help and best regards
Ben

b_schnarr

No replies anymore in this forum?

frederikherema1

You can extends the LDAP implementation in activiti and add additional 'fake' roles based on any data you have available.

cshar

Hi, I am stuck up on something same for my struts 2 web app that is using activiti as backend engine to define approval process. I would like to have a capability of adding roles and assigning permissions to those roles. I should be able to attach roles to the users accordingly. Could you please advise. Thanks!

jbarrez

You need to make the users part of a group (or more). In the process definitions, you us the 'candidateGroup' to assign a task to a group.
When the user logs in, get his/her groups and do a query with those groups for candidateGroup.