nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

Advanced workflow on an 'invisible' space

jenn_l

Hi all,

I have a situation here where I want to start a workflow on a document, which is placed in a space where other people don't have access (not even consumer permission). When the advanced workflow is started, the reviewer can see the task, but can't see the document (resources), which is not what I want.
But these documents need to be secured in a space, which is not visible for others, because not everybody may see the documents. Only certain people may review (see) particular documents in this space.

How can I accomplish this? The document must be seen by only the selected reviewers in the workflow.
Please help…

Regards,
Jenny

Find more posts tagged with

Comments

jayjayecl

Hi,

use script or java actions after the start-task to create custom permissions suiting your needs.
See http://wiki.alfresco.com/wiki/WorkflowAdministration to know how to call script or java actions in a workflow process definition.
See http://wiki.alfresco.com/wiki/3.1_JavaScript_API#Permission_and_Security_API to know about permissions scripting API, or http://dev.alfresco.com/resource/docs/java/repository/org/alfresco/repo/security/permissions/impl/PermissionServiceImpl.html to know about permissions JAVA API.

hope this helps

jenn_l

Hi,

Thanks for your quick reply.

I am using an enterprise edition of Alfresco. How do I create my own xml with a jboss designer?
Can you be a little more specific, please? Does that mean that I can create by hand my own xml file and give the selected people other permission when this customized workflow is started?

Regards,
Jenny

jayjayecl

Can you be a little more specific, please? Does that mean that I can create by hand my own xml file and give the selected people other permission when this customized workflow is started?

Yes, and as workflows are quite complex, I would need about three days to write a complete explanation about what I said.
I think the best thing to do for you is have a look at this perfect tutorial :
http://ecmarchitect.com/archives/2007/11/19/785

jenn_l

Okay, I understand.
I'll check on it and do my best.
Thanks again.

jenn_l

Hi all,

I am overwriting the permission for a reviewer and after the workflow is ended, all the permission will be removed from the reviewer. This works fine for the workflows that I've modified.
I'm still not able to do the above, when the reviewer choose for a reassign.
Here I have an example of my adhoc_processdefintion.xml , which is OK.

<?xml version="1.0" encoding="UTF-8"?>

<process-definition xmlns="urn:jbpm.org:jpdl-3.1" name="wf:adhoc">

   <swimlane name="initiator"/>

   <start-state name="start">
      <task name="wf:submitAdhocTask" swimlane="initiator"/>
      <transition name="" to="adhoc"/>
   </start-state>

   <swimlane name="assignee">
      <assignment class="org.alfresco.repo.workflow.jbpm.AlfrescoAssignment">
         <actor>#{bpm_assignee}</actor>
      </assignment>
   </swimlane>
   
   <task-node name="adhoc">
      <task name="wf:adhocTask" swimlane="assignee">
         <event type="task-create">
            <script>
               if (bpm_workflowDueDate != void) taskInstance.dueDate = bpm_workflowDueDate;
               if (bpm_workflowPriority != void) taskInstance.priority = bpm_workflowPriority;
            </script>
         </event>
      </task>
        <event type="node-enter">
            <action class="org.alfresco.repo.workflow.jbpm.AlfrescoJavaScript">
                <script>
                    for (var i = 0; i &lt; bpm_package.children.length; i++)
                    {
                        var username = bpm_assignee.properties["cm:userName"];
                  if (logger.isLoggingEnabled()) logger.log("Setting permission Coordinator for " + username);
                  var document = bpm_package.children[i];
                  var parent = bpm_package.children[i].getParent();
                  /* Make it visible. */
                  document.setPermission("Coordinator",username);
                  /* Enable check-out/check-in. */
                  parent.setPermission("Coordinator",username);
               }
                </script>
            </action>
        </event>
      <transition name="" to="completed">
         <action class="org.alfresco.repo.workflow.jbpm.AlfrescoJavaScript">
           <script>
              if (wf_notifyMe)
              {
                 var mail = actions.create("mail");
                 mail.parameters.to = initiator.properties.email;
                 mail.parameters.subject = "Adhoc Task " + bpm_workflowDescription;
                 mail.parameters.from = bpm_assignee.properties.email;
                 mail.parameters.text = "It's done";
                 mail.execute(bpm_package);
              }
              for (var i = 0; i &lt; bpm_package.children.length; i++)
                    {
                       var username = bpm_assignee.properties["cm:userName"];
                  if (logger.isLoggingEnabled()) logger.log("Removing permission Coordinator for " + username);
                  var document = bpm_package.children[i];
                  var parent = bpm_package.children[i].getParent();
                  /* Hide it. */
                  document.removePermission("Coordinator",username);
                  /* Disable check-out/check-in*/
                  parent.removePermission("Coordinator",username);
               }
           </script>
         </action>
        </transition>
   </task-node>
   
   <task-node name="completed">
      <task name="wf:completedAdhocTask" swimlane="initiator"/>
      <transition name="" to="end"/>
   </task-node>
      
   <end-state name="end"/>
   
</process-definition>
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

The following code of mine changerequest_processdefinition.xml doesn't work:

<?xml version="1.0" encoding="UTF-8"?>

<process-definition xmlns="urn:jbpm.org:jpdl-3.1" name="wcmwf:changerequest">

   <swimlane name="initiator" />

   <start-state name="start">
      <task name="wcmwf:submitChangeRequestTask" swimlane="initiator" />
      <transition name="" to="changeRequest" />
   </start-state>

   <swimlane name="assignee">
      <assignment class="org.alfresco.repo.workflow.jbpm.AlfrescoAssignment">
         <actor>#{bpm_assignee}</actor>
      </assignment>
   </swimlane>
   
   <task-node name="changeRequest">
      <task name="wcmwf:changeRequestTask" swimlane="assignee" >
     <assignment class="org.alfresco.repo.workflow.jbpm.AlfrescoAssignment">
               <actor>#{bpm_assignee}</actor>
            </assignment>
     </task>
     <event type="node-enter">
            <action class="org.alfresco.repo.workflow.jbpm.AlfrescoJavaScript">
                <script>
                    for (var i = 0; i &lt; bpm_package.children.length; i++)
                    {
                        var username = bpm_assignee.properties["cm:userName"];
                  if (logger.isLoggingEnabled()) logger.log("Setting permission Coordinator for " + username);
                  var document = bpm_package.children[i];
                  var parent = bpm_package.children[i].getParent();
                  /* Make it visible. */
                  document.setPermission("Coordinator",username);
                  /* Enable check-out/check-in. */
                  parent.setPermission("Coordinator",username);
               }
                </script>
            </action>
        </event>
      <transition name="" to="end" >
     <action class="org.alfresco.repo.workflow.jbpm.AlfrescoJavaScript">
                <script>
                     for (var i = 0; i &lt; bpm_package.children.length; i++)
                    {
                       var username = bpm_assignee.properties["cm:userName"];

                  if (logger.isLoggingEnabled()) logger.log("Removing permission Coordinator for " + username);
                  var document = bpm_package.children[i];
                  var parent = bpm_package.children[i].getParent();
                  /* Hide it. */
                  document.removePermission("Coordinator",username);
                  /* Disable check-out/check-in*/
                  parent.removePermission("Coordinator",username);
               }
                </script>
            </action>
     
     </transition>
   </task-node>
      
   <end-state name="end" />
   
   <event type="process-end">
        <action class="org.alfresco.repo.avm.wf.AVMRemoveWFStoreHandler"/>
    </event>
   
</process-definition>
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Anyone, any help about what I am missing?

Thanks,

sgartner

The following code of mine changerequest_processdefinition.xml doesn't work:

Jenn_l,

If you were able to get this working consistently in your own custom workflow, I would love to see the final solution.

Thanks,