Bug 1005981

Summary: 5 roles available for BPM Suite
Product: [Retired] JBoss BPMS Platform 6 Reporter: Catherine Robson <crobson>
Component: Business CentralAssignee: David Gutierrez <dgutierr>
Status: CLOSED CURRENTRELEASE QA Contact: Marek Baluch <mbaluch>
Severity: high Docs Contact:
Priority: high    
Version: 6.0.0CC: atangrin, kverlaen, lpetrovi, paradhya, pzapataf, rrajasek
Target Milestone: ER5Flags: mbaluch: needinfo? (paradhya)
Target Release: 6.0.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
: 1022253 (view as bug list) Environment:
Last Closed: 2014-08-06 20:06:19 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Bug Depends On:    
Bug Blocks: 1002522, 1006308, 1007729, 1016920    
Attachments:
Description Flags
Expected user roles for BPMS 6
none
business-central workbench security policy none

Description Catherine Robson 2013-09-09 18:51:04 UTC 
Created attachment 795734 [details]
Expected user roles for BPMS 6

Description of problem:
Currently we only have 3 roles available in BPM Suite.  It was expected that we were going to have the 5 roles as defined in the attached document.

Version-Release number of selected component (if applicable):
6.0.0.ER2
Comment 2 Lukáš Petrovický 2013-09-10 13:43:34 UTC 
Although I agree with the need to have a better set of user roles, any such change will require significant time to test; if I am to give qa_ack+ to this, we need to incorporate this into program schedule.
Comment 3 Prakash Aradhya 2013-09-16 22:01:33 UTC 
Lukas,
Understandable.  This has been defined for a while.  We do need to get this into the product fairly quickly.  
I would like to keep this as a must for Beta.
Comment 4 Pedro Zapata 2013-09-17 09:57:00 UTC 
Can you also provide the role ID for every description? otherwise we will end-up with several choices for each (i.e 'admin' vs 'ADMIN')
Comment 6 David Gutierrez 2013-10-22 09:14:05 UTC 
Created attachment 814910 [details]
business-central workbench security policy
Comment 7 David Gutierrez 2013-10-22 09:16:41 UTC 
We just finished the developments required to customize the Business Central UI for the 5 roles specified. The five roles we have agreed on are:

* "admin" is everything

* "developer" is everything except administration (under authoring)

* "analyst" is same as "developer", though without asset repository and deployments

* "user" hide authoring completely, so be the process management, tasks and dashboards sections only

* "manager" would only be the dashboards
 

Attached is the workbench security policy that implements the above definitions. The policy can be used to define what top level menu options & home sections are granted per role. 

The workbench policy file is part of the war file deployed onto the app server so it could be customized by customers (business-central/WEB-INF/classes/workbench-policy.properties). 

This is not a full featured security policy customization mechanism at all, but at least it allows to change the current configuration instead of having it hard-coded.


uberfire
-----------------

Github commits (master):

https://github.com/droolsjbpm/uberfire/commit/db6b5a9c01316ff211f596db72d4cbf41145084a

Github commits (0.3.x):

https://github.com/droolsjbpm/uberfire/commit/e4d45c96ffbc5370246139d27f3d60aea66d1012

kie-wb-common
-----------------

Github commits (master):

https://github.com/droolsjbpm/kie-wb-common/commit/f00b3391b45955d31c2b91f7cf3db4adf3aaed2e
https://github.com/droolsjbpm/kie-wb-common/commit/0556fe17be0d4a5db8367325b4696c6abac753f6
https://github.com/droolsjbpm/kie-wb-common/commit/157cd2917e13d0e6d0ab5c6e0f0bb882539429e1
https://github.com/droolsjbpm/kie-wb-common/commit/c1ce4bae47a604c6bc6c917f028488075d90157c

Github commits (6.0.x):

https://github.com/droolsjbpm/kie-wb-common/commit/4b3a9f9befa40455fa06a031937c72ec6e3a1283
https://github.com/droolsjbpm/kie-wb-common/commit/a4711316d4cf24751d04f94d7f06f96e94223963
https://github.com/droolsjbpm/kie-wb-common/commit/b1cf4b40b80cd87b00a34d3f07c52840aedf9190
https://github.com/droolsjbpm/kie-wb-common/commit/cae2d5f28ed8b783af3c46e604e1b3c9bb8cf611

kie-wb-distributions
-----------------

Github commits (master):

https://github.com/droolsjbpm/kie-wb-distributions/commit/db66a58d1f4e00429068a8ec5e94e0e193dfa6df
https://github.com/droolsjbpm/kie-wb-distributions/commit/cf144df80d565bcaebd56f7605bde65dcafb5a34
https://github.com/droolsjbpm/kie-wb-distributions/commit/bfe8ad1adb4398df292b491d2ee779abfc09b77e
https://github.com/droolsjbpm/kie-wb-distributions/commit/106bb985c9d93163efddd69f6820a30c7d2071ee

Github commits (6.0.x):

https://github.com/droolsjbpm/kie-wb-distributions/commit/f00c966b3809d8ef7052766e311ce96c57cb1acb
https://github.com/droolsjbpm/kie-wb-distributions/commit/8fa93d6b0f90693a9227fb633fc6a39d218021d5
https://github.com/droolsjbpm/kie-wb-distributions/commit/495ef2dae54dd72ba08feca098c97fe6450e4418
https://github.com/droolsjbpm/kie-wb-distributions/commit/b00439ab1cb194a69e37b6c861759af09b202fc8

jbpm-dashboard
-----------------

Github commits (master):

https://github.com/droolsjbpm/jbpm-dashboard/commit/d25a8ce01cdc5b547fc29d99fa06c1dbf9dce818

Github commits (6.0.x):

https://github.com/droolsjbpm/jbpm-dashboard/commit/6f2da1018bc28c4994b9c83d131258d98a09fc31
Comment 8 David Gutierrez 2013-10-24 08:50:29 UTC 
One additional commit was needed.

kie-wb-distributions
-----------------

Github commit (master):

https://github.com/droolsjbpm/kie-wb-distributions/commit/e80eb577e2e7b9f17384425eaf24a768ff84eea5

Github commit (6.0.x):

https://github.com/droolsjbpm/kie-wb-distributions/commit/19ea8cfa5e218c7690b37355e1720dbb28cb7d68

Sorry about that.
Comment 9 Marek Baluch 2013-12-10 12:41:44 UTC 
Verified on ER5.