Bug 1203177

Summary: WLS: jms request fails to claim a human task assigned to a group
Product: [Retired] JBoss BPMS Platform 6 Reporter: Karel Suta <ksuta>
Component: Business CentralAssignee: Shelly McGowan <smcgowan>
Status: CLOSED EOL QA Contact: Karel Suta <ksuta>
Severity: high Docs Contact: Tomas 'Sheldon' Radej <tradej>
Priority: high    
Version: 6.1.0CC: kverlaen, mbaluch, rrajasek, rsynek, smcgowan, tradej
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Sending a JMS request to a BPMS instance on Oracle WebLogic to perform an operation on a human task may result in a PermissionDeniedException. This happens if the task is associated only with the group the user is in, and not directly with the user, due to the user groups not being loaded properly on Oracle WebLogic. There is no workaround except associating the task directly with the user.
 Story Points: ---
Clone Of: Environment:
Last Closed: 2020-03-27 19:36:59 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1195261    
Bug Blocks:    
Attachments:
Description Flags
Error stacktrace none

Description Karel Suta 2015-03-18 10:33:59 UTC 
Created attachment 1003147 [details]
Error stacktrace

Description of problem:
When I try to claim human task assigned to a group using JMS on Weblogic, I get error listed ion stacktrace. This is related to BZ 1195261 - see comment 1 .

As Ivo wrote Claim task fails because user groups aren't correctly loaded. Fix done in BZ 1195261 remove issue happening when loading of LoginContext in RequestMessageBean, but there is another issue in method getGroupsFromSubject.

Subject instance returned by Weblogic contains list of Principal, but those principals are instances of WLSUserImpl or WLSGroupImpl which doesn't implement interface java.security.acl.Group, therefore they aren't processed in [1].


[1] https://github.com/droolsjbpm/droolsjbpm-integration/blob/master/kie-remote/kie-remote-services/src/main/java/org/kie/remote/services/jms/RequestMessageBean.java#L466



Version-Release number of selected component (if applicable):
6.1.0.ER6
Comment 8 Red Hat Bugzilla 2023-09-14 02:56:39 UTC 
The needinfo request[s] on this closed bug have been removed as they have been unresolved for 1000 days