nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

Use own User/Group-tables

antje

Is there a possibility to use our own user/role-tables and check the tasklist against those tables instead the activiti-tables?

Best regards
Antje

Find more posts tagged with

Comments

falko_menge

For storing users and groups in some external system, you can exchange the IdentitySession by an own implementation, e.g.:

<br>ProcessEngineConfiguration processEngineConfiguration = new ProcessEngineConfiguration();<br>Map<Class< ? >, SessionFactory> sessionFactories = processEngineConfiguration.getSessionFactories();<br>sessionFactories.put(IdentitySession.class, new MyIdentitySessionFactory());<br>ProcessEngine processEngine = processEngineConfiguration.buildProcessEngine();<br>

with:

<br>public class MyIdentitySessionFactory implements SessionFactory {<br><br>&nbsp; public Session openSession() {<br>&nbsp;&nbsp;&nbsp; return new MyIdentitySession();<br>&nbsp; }<br><br>}<br>

If you are using Spring, you may want to extend the ProcessEngineFactoryBean to do this configuration for you.

antje

We are using Spring, but the ProcessEngineFactoryBean only has an IdentityService, no IdentitySession. What`s the difference between those classes and (how) do they work together?
How can I give a IdentitySession into the configuration with spring?

jbarrez

As Falko stated, you will need to extend the ProcessEngineFactoryBean and use the code Falko posten. The fact that the processEngineFactoryBean doesnt support it, is a bug.

falko_menge

akakunin

Thanks Falko! Your code sample works exactly like it should work!

hlux

Hello,

I'm trying to achieve the same thing.
I'm using activiti 5.4.

My approach was to add a CustomIdentitySessionFactory to the SpringProcessEngineConfiguration

<br><bean id="processEngineConfiguration" class="org.activiti.spring.SpringProcessEngineConfiguration"> <br>&nbsp;&nbsp;&nbsp; <property name="dataSource" ref="dataSource" /><br>&nbsp;&nbsp;&nbsp; <property name="transactionManager" ref="transactionManager" /> <br>&nbsp;&nbsp;&nbsp; <property name="databaseSchemaUpdate" value="true" /> <br>&nbsp;&nbsp;&nbsp; <property name="jobExecutorActivate" value="false" /><br>&nbsp;&nbsp;&nbsp; <property name="dbCycleUsed" value="true" /><br>&nbsp;&nbsp;&nbsp; <property name="customSessionFactories"><br>&nbsp;&nbsp;&nbsp; <list><br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <bean class="de.hlux.activiti.custom.spring.CustomIdentitySessionFactory"></bean><br>&nbsp;&nbsp;&nbsp; </list><br>&nbsp;&nbsp;&nbsp; </property> <br>&nbsp; </bean><br>

<br>public class CustomIdentitySessionFactory implements SessionFactory {<br><br> public Session openSession() {<br>&nbsp; return (Session) new CustomIdentitySession();<br> }<br><br> public Class<?> getSessionType() {<br>&nbsp; return IdentitySession.class;<br> }<br><br>}<br>

This works so far.
The thing I'd like some help with is to find the best way to inject the second datasource.

ProcessConfigurationImpl uses the following code to create a SqlSessionFactory

<br>protected void initSqlSessionFactory() {<br>&nbsp;&nbsp;&nbsp; if (sqlSessionFactory==null) {<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; InputStream inputStream = null;<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; try {<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; inputStream = ReflectUtil.getResourceAsStream("org/activiti/db/ibatis/activiti.ibatis.mem.conf.xml");<br><br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; // update the jdbc parameters to the configured ones&hellip;<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Environment environment = new Environment("default", transactionFactory, dataSource);<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Reader reader = new InputStreamReader(inputStream);<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; XMLConfigBuilder parser = new XMLConfigBuilder(reader);<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Configuration configuration = parser.getConfiguration();<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; configuration.setEnvironment(environment);<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; configuration.getTypeHandlerRegistry().register(VariableType.class, JdbcType.VARCHAR, new IbatisVariableTypeHandler());<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; configuration = parser.parse();<br><br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; sqlSessionFactory = new DefaultSqlSessionFactory(configuration);<br><br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; } catch (Exception e) {<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; throw new ActivitiException("Error while building ibatis SqlSessionFactory: " + e.getMessage(), e);<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; } finally {<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; IoUtil.closeSilently(inputStream);<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; }<br>&nbsp;&nbsp;&nbsp; }<br>&nbsp; }<br>

That is used within the DbSqlSessionFactory

<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; dbSqlSessionFactory = new DbSqlSessionFactory();<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; dbSqlSessionFactory.setDatabaseType(databaseType);<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; dbSqlSessionFactory.setIdGenerator(idGenerator);<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; dbSqlSessionFactory.setSqlSessionFactory(sqlSessionFactory);<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; dbSqlSessionFactory.setDbIdentityUsed(isDbIdentityUsed);<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; dbSqlSessionFactory.setDbHistoryUsed(isDbHistoryUsed);<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; dbSqlSessionFactory.setDbCycleUsed(isDbCycleUsed);<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; addSessionFactory(dbSqlSessionFactory);<br>

At the moment I think, that my CustomIdentitySession should make use of a DbSqlSessionFactory,
but that of course needs to have the datasource where the users and groups are stored.

I'm not familiar enough with the design patterns used and would like to hear you opinion on my approach.
Maybe I'm completely wrong here.

greetings
hlux

mondhs

Hlux,

Thanks for the sample it was good starting point to integrate internal user management service to Acitviti.

I used same idea that CustomUserEntityManagerFactory factory creates CustomUserEntityManager. CustomUserEntityManager is wrapper for CustomUserDao. To represent implementaiton is really required long post. So I pushed sample project to github:https://github.com/mondhs/activiti-CustomUserManagement. Most important classes:
* org.activiti.custom.spring.CustomUserEntityManager
* org.activiti.custom.spring.CustomUserEntityManagerFactory
* org.activiti.custom.security.UserDao

Also I wanted that it would be used same user as it is already logged in using custom login form. In order to do that I needed implement:
* org.activiti.custom.explorer.ui.login.CustomDefaultLoginHandler that adapts org.activiti.custom.security.CurrentUserService results

spring configuration could be found in src/main/resources/META-INF/spring/custom-user-management-beans.xml

Similar topics:
* Exchange IdentityService (or other services) http://forums.activiti.org/en/viewtopic.php?f=4&t=427
* Use own User/Group-tables: http://forums.activiti.org/en/viewtopic.php?f=3&t=345
* How to Use own User Maangement instead of Activiti provided http://forums.activiti.org/en/viewtopic.php?f=6&t=6155

jbarrez

Thanks for taking the time to posts this. Really valuable!

arashmarzi

Here's probably a really basic question but Im a beginner to using Activiti both programmatically and through explorer. I am trying to achieve the same goal as discussed in this thread (essentially adding a custom authentication system to replace ldap and hardcoding users), though apart from like creating a java project and writing up the code for it I am not sure how to deploy it in explorer. For example, if i was to use the code from mondhs's project then how would I use it in coordination with activiti explorer?

Thanks for any guidance

frederikherema1

Not sure what "mondhs's" project is, but here is my 2 cents:
- The identity-managent integration is actually done in the activiti-engine itself, not in the activiti-explorer.
- Since activiti-explorer uses the engine, any "custom" identity-management configured in the engine will be used by the explorer.
- If you have an external system that does the user/group management that is not accessible through a Java-api, you should create the solution as described above, using java-code that does REST/HTTP or whatever calls you need to communicate with the system.

arashmarzi

"mondhs's project" is in reference to the git project posted by user mondhs earlier in this thread https://github.com/mondhs/activiti-CustomUserManagement

Ok, I understand that activiti engine and activiti explorer are 2 different components. Are you implying that if i want to create my own identity management component via Activiti Designer in Eclipse then I have to change activiti engine, But then how do I incorporate that into the original activiti engine? After which, how to i incorporate that into explorer? How do would I follow through with the basics? The user guide is clear and comprehensive on the necessary code but not 100% clear of the integration of new code into the existing activiti engine/explorer. If you can give me a generic step by step as to integrate new projects into the engine or pinpoint the section in the user guide that states it, that would be extremely helpful.

frederikherema1

Activiti explorer is just a webapp, containing the activiti engine. The engine is configured using a spring-context file (src/main/webapp/WEB-INF/applicationContext.xml). Any customisations to core-services (like the user-management) should be plugged into that configuration.

So just take the activiti-explorer web app, add your custom jar's in it and wire everything in in the config-file and you're ready to go.

franck102

Trying to solve the same issue, I understand how to create the proper ProcessEngine but how can I get it picked up by the ProcessEngines static class?

ProcessEngines.getDefaultProcessEngine is used all over the place, and I don't see how to override its default engine.
The best I can come up with is

ProcessEngines.init()
myEngine = <build my own engine>
ProcessEngines.registerProcessEngine(myEngine);

… and I will need to duplicate quite a bit of the code in ProcessEngines.init() to "<build my own engine>"

Any better suggestion?
Thanks!
Franck

frederikherema1

Any process engine you create (using the build()) registers itself with the ProcessEngines static class. This is usefull in case you bootstrap your engine using Spring or programatically. This can be done before or after a call to the init(), it doesn't matter, as long as there is no activiti.cfg.xml file on your class path.

In case you're using a plain processEngine, bootstrapped from the activiti.cfg.xml file, it's best to give the process engine the name "default". This way, when calling ProcessEngines.init(), the classpath will be scanned for the config file, and your config will be used. So IMHO, there is no need to call the register yourself, nor is it needed to duplicate any init() code…

cicpa

I'm using activiti 5.14 engine and i need to custom identityService.
I don't need activiti explore and i want to use only
ManagementService, RepositoryService, TaskService and RuntimeService
My goal is to override many methods as possible.
From my investigation i have noted that when i call

taskCandidateUser("kermit")

the findGroupsByUser(String userId) was called.

There are other points in the services ManagementService, RepositoryService, TaskService and RuntimeService when an Identity (UserIdentityManager/GroupIdentityManager) service was called.

trademak

And what's your question? taskCandidateUser is the only special case where it also looks for groups of a user. The other ones are really straightforward lookups of a user or group.

cicpa

Thanks for your reply.
Yes my question was if taskCandidateUser are the only case where identity service is used in runtime and task service.

harishashim

This question is very popular with Activiti. So I am proud the be the first guy in 2016 to ask this question again!

All my codes relevant to this question is in https://github.com/jbarrez/spring-boot-with-activiti-example/issues/5#issuecomment-168306116

In short I tried the codes as in mondhs solution in this (Activiti Forum) thread. Basically doing injection using XML configuration file for spring. Does not work for me. And then I find discussion in the above github link. So instead of using XML, I tried to do the bean injection using code. Still does not work.

My question:

If I configure my activiti-spring-boot with XML as in mondhs
https://github.com/mondhs/activiti-CustomUserManagement/blob/master/src/main/resources/META-INF/spring/custom-activiti-beans.xml

And then implemented all the user and group manager, factory, classes etc. Not that much different than mondhs implementation of them.

And then I use this code to manually create user and group.

    @Bean
    InitializingBean usersAndGroupsInitializer(
            final IdentityService identityService) {

        final Logger log = LoggerFactory.getLogger(this.getClass());

        return new InitializingBean() {
            public void afterPropertiesSet() throws Exception {

                Group group = identityService.newGroup("user");
                group.setName("users");
                group.setType("security-role");
                identityService.saveGroup(group);

                User admin = identityService.newUser("rootadmin");
                admin.setPassword("admin");
                identityService.saveUser(admin);

            }
        };
    }

And then discovered that the above code create user and group in act_id_user and act_id_group table.

What should then be my conclusion? Can I conclude that my customized identity service using own user and group table is not working?

jbarrez

Now the christmas holidays are over, there will be more people being able to answer 😉

I've responded to the github comments, can we discuss there further (easier for code). Would be handy if you have some executable code that I can give a try.

sayantan_sinha

Is this link still available? I am trying to have a look at the post you linked in connection to this story.