nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

Control user performing automatic task

pcuvecle

Hi,

Since it is possible to write automatic task in a jBPM Workflow, how is it possible to control what user will run the associated action ?

ex :

<task-node name="myNode">
      <event type="node-leave">
         <action name="myAction" class="myActionHandler"></action>
      </event>
      <transition name="tr2" to="myOtherTask"></transition>
</task-node>
‍‍‍‍‍‍‍‍

In that case myActionHandler will encapsulate some code that will manipulate content in the repository and I would like to be able to define an Alfresco user to perform this task since I need to give the appropriate rights to him.

Any idea ?
Thanks in advance

Find more posts tagged with

Comments

ribz33

If i understand well, i think at the moment you cant

i had post already about this…
http://forums.alfresco.com/viewtopic.php?t=4644&highlight=

If you need it you can vote on jira ticket
http://issues.alfresco.com/browse/AR-1142

pcuvecle

Hi,

Thanks for your quick answer

So If I understand well, the initiator of a workflow will be the user who will run the subsequent automatic tasks ?
I guess that the manual tasks assigned to real users will be exectuted under the corresponding credentials.

To workaround this, is there a way to eventually re-impersonate the session at the begining of a jBPM Action Handler class (even by providing the target user credentials) ?

davidc

Workflow actions are executed as the user who signals the next step of the workflow. So, actions hooked into the start node are executed as the initiator, and subsequent task actions are executed as the user who ends the task.

You can execute as a specific user if you're developing your own Java action. You can retrieve any Alfresco service (including AuthenticationService) within a java action - see org.alfresco.repo.workflow.jbpm.AlfrescoJavaScript for an example of hooking into Alfresco services. You can use AuthenticationService and AuthenticationUtils to a run as a specific user.

pcuvecle

Thanks David, I'll try to use to Authentication service to reimpersonate my session

vladimir_kovaly

Have you succeeded? Could you please share the sources of your ActionHandler?

pcuvecle

System account impersonation exemple :

// save user credentials
Authentication currentAuthentication = authenticationComponent.getCurrentAuthentication();
// authenticate as system user
authenticationComponent.setSystemUserAsCurrentUser();
UserTransaction transaction = transactionService.getUserTransaction();
try {
    transaction.begin();
    
    // your code
    
    transaction.commit();
} catch (Exception e) {
    try {
        transaction.rollback();
    } catch (IllegalStateException e1) {
        // handle exception
    } catch (SecurityException e1) {
        // handle exception
    } catch (SystemException e1) {
        // handle exception
    }
    
} finally {
    // restore user security context
    authenticationComponent.setCurrentAuthentication(currentAuthentication);
}
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

ribz33

I did a class to execute workflow scripts as system user.
This can help you i think.

I contribute it to JIRA :
http://issues.alfresco.com/browse/AR-1911