<div>Hi,</div>
<div> </div>
<div>Just to add on some information.</div>
<div> </div>
<div>I have tried to do the following and had the following findings.</div>
<div> </div>
<div>on the gwt-console-server-drools.war, I have extracted and remove ChangeSet.xml from drools-gwt-console-5.1.0.jar onto the classpath.</div>
<div>Thus, allow me to change the <resource> element's attributes value for testing.</div>
<div> </div>
<div>1) I found that by changing the attributes username="admin" password="admin" will allow me to view/unview the processes depending on my password is set correctly.</div>
<div>Thus, does it means that from Drools Flow console will always list the process in the particular package using the particular user.</div>
<div>How can I change this to allow Drools Flow console to tie to the view to the user logged in and in whichever package he has rights to?</div>
<div> </div>
<div>2) And, also by accessing <a href="http://localhost:8080/drools-guvnor/org.drools.guvnor.Guvnor/webdav/packages/defaultPackage">http://localhost:8080/drools-guvnor/org.drools.guvnor.Guvnor/webdav/packages/defaultPackage</a> from windows explorer using "john" as login, it is able to list all the resources which I cannot see in Guvnor with the same user login.</div>
<div>Thus, does it means that I'm able to see the "Evaluation" process when I change the ChangeSet.xml user to "john" is because webdav does not restrict the listing based on role?</div>
<div>Is it possible for "john" who cannot view defaultPackage on Guvnor, not to be able to see the "Evaluation" process on Drools Flow console?</div>
<div> </div>
<div>Help please.</div>
<div> </div>
<div>Thanks.</div>
<div> </div>
<div> </div>
<div> </div>
<div>Han Ming</div>
<div> </div>
<div><br><br> </div>
<div class="gmail_quote">On Tue, Aug 10, 2010 at 6:28 PM, Han Ming Low <span dir="ltr"><<a href="mailto:hanming73@gmail.com">hanming73@gmail.com</a>></span> wrote:<br>
<blockquote style="BORDER-LEFT: #ccc 1px solid; MARGIN: 0px 0px 0px 0.8ex; PADDING-LEFT: 1ex" class="gmail_quote">
<div>Hi Kris,</div>
<div> </div>
<div>Thanks for the reply.</div>
<div> </div>
<div>Sorry for any confusion.</div>
<div>I found that I'm wrong to say that the process is not showing is due to enabling the role base authorization.</div>
<div> </div>
<div>I realize that, maybe I'm in a private network, when I first try to access the "Process" view in Drools Flow console which will in turn try to query <a href="http://localhost:8080/gwt-console-server/rs/process/definitions" target="_blank">http://localhost:8080/gwt-console-server/rs/process/definitions</a>, it will take a long time for the server to return the definition, might be because of the xsd at <a href="http://anonsvn.jboss.org/repos/labs/labs/jbossrules/trunk/drools-api/src/main/resources/change-set-1.0.0.xsd" target="_blank">http://anonsvn.jboss.org/repos/labs/labs/jbossrules/trunk/drools<u><font color="#0000ff">-api/src/main/resources/change-set-1.0.0.xsd</font></u></a></div>
<div>After a long wait, when the server return the result for definitions after the first time, I will be able to see the Process.</div>
<div> </div>
<div>Now, when I try to login to the Drools Flow console by loggin in as "john" which I do not defined any User Permission at Guvnor, I'm still able to see the "Evaluation" process.</div>
<div> </div>
<div>Is it possible to restrict user "john" not to see the process that he is not "defined" to see.</div>
<div> </div>
<div>Regarding your suggestion on using changeset.xml, I'm sorry I'm not sure what is required to be done.</div>
<div>I would thought that Drools Flow console is using the guvnor's authenticator because after I change the guvnor-users.properties, say the password for user "admin" is changed to "admin1", I managed to login to Drools Flow console using the new password "admin1".</div>
<div>To me, it means that Drools Flow is actually now using guvnor-users.properties for authentication.</div>
<div>(if I use the old password "admin" will encounter a "Authentication Failed" error)<br></div>
<div>Just that now my problem is directly opposite to what I thought the problem was first to be.</div>
<div>i.e.</div>
<div>I want the Process not to show when login using "john" but it is showing instead.</div>
<div> </div>
<div>Sorry for the confusion.</div>
<div class="im">
<div> </div>
<div>Any advice is greatly appreciated.</div>
<div> </div>
<div>Thanks.</div>
<div> </div>
<div> </div>
<div>Han Ming<br></div></div>
<div class="gmail_quote">2010/8/6 Kris Verlaenen <span dir="ltr"><<a href="mailto:kris.verlaenen@cs.kuleuven.be" target="_blank">kris.verlaenen@cs.kuleuven.be</a>></span>
<div>
<div></div>
<div class="h5"><br>
<blockquote style="BORDER-LEFT: #ccc 1px solid; MARGIN: 0px 0px 0px 0.8ex; PADDING-LEFT: 1ex" class="gmail_quote">
<div bgcolor="#ffffff">
<div><font size="2" face="Arial">Han Ming,</font></div>
<div><font size="2" face="Arial"></font> </div>
<div><font size="2" face="Arial">The gwt-console uses the authentication as defined in the ChangeSet.xml inside the drools-gwt-console-{version}.jar in the gwt server war:</font></div>
<div><font size="1"></font> </div>
<div><font size="1"><resource source='<a href="http://localhost:8080/drools-guvnor/org.drools.guvnor.Guvnor/package/defaultPackage/LATEST" target="_blank">http://localhost:8080/drools-guvnor/org.drools.guvnor.Guvnor/package/defaultPackage/LATEST</a>' type='PKG' basicAuthentication="enabled" username="admin" password="admin" /></font></div>
<div><font size="1"></font> </div>
<div><font size="1"><font size="2" face="Arial">I guess you could change that or make sure the credential that is specified here works for your configuration, would that help?</font></font></div>
<div><font size="2" face="Arial"></font> </div>
<div><font size="2" face="Arial">Kris</font></div>
<div><font size="2" face="Arial"></font> </div>
<blockquote style="BORDER-LEFT: #000000 2px solid; PADDING-LEFT: 5px; PADDING-RIGHT: 0px; MARGIN-LEFT: 5px; MARGIN-RIGHT: 0px">
<div>
<div></div>
<div>
<div style="FONT: 10pt arial">----- Original Message ----- </div>
<div style="FONT: 10pt arial; BACKGROUND: #e4e4e4"><b>From:</b> <a title="hanming73@gmail.com" href="mailto:hanming73@gmail.com" target="_blank">Han Ming Low</a> </div>
<div style="FONT: 10pt arial"><b>To:</b> <a title="rules-users@lists.jboss.org" href="mailto:rules-users@lists.jboss.org" target="_blank">Rules Users List</a> </div>
<div style="FONT: 10pt arial"><b>Sent:</b> Thursday, August 05, 2010 10:28 AM</div>
<div style="FONT: 10pt arial"><b>Subject:</b> [rules-users] Can't see process in gwt-console after changingguvnor to authenticator</div>
<div><br></div>
<p>Hi,<br> <br>I'm having problems with seeing the process in gwt-console. :p<br> <br>This time the difference is I change the guvnor components.xml authenticator to "other" and role based authorization as "true" and set the login-config.xml authentication to a users.properties<br>
<br>The steps and difference in setup I have made is as follows<br>1) change guvnor and flow persistence to mysql instead of h2 <br>2) Build defaultPackage, ABLE to see process in Drools Flow console<br>3) Shutdown both human task and jboss<br>
4) Configure role-base authorization and users.properties file authentication<br>5) Start human.task and jboss<br>6) Not able to see process in Drools Flow console<br>7) Rebuild defaultPackage<br>8) Not able to see process in Drools Flow console<br>
9) Restart both human task and jboss<br>10) Not able to see process in Drools Flow console<br>11) Delete process in guvnor and delete archive<br>12) Copy process from local file system to guvnor through WebDAV<br>13) Build defaultPackage<br>
14) Not able to see process in Drools Flow console<br>15) Shutdown both human task and jboss<br>16) Change login back to defaultAuthenticator.authenticate<br>17) Start human.task and jboss<br>18) ABLE to see process again<br>
<br>What should I do to allow the process to be seen when other authenticator is used?<br>Any advice is greatly appreciated.</p>
<p>Thanks.</p>
<p><br>Han Ming</p></div></div>
<p>
<hr>
<p></p>_______________________________________________<br>rules-users mailing list<br><a href="mailto:rules-users@lists.jboss.org" target="_blank">rules-users@lists.jboss.org</a><br><a href="https://lists.jboss.org/mailman/listinfo/rules-users" target="_blank">https://lists.jboss.org/mailman/listinfo/rules-users</a><br>
<p></p>
<p></p></p></blockquote><br><font size="3" face="3D"Helvetica"">Disclaimer: <a href="http://www.kuleuven.be/cwis/email_disclaimer.htm" target="_blank">http://www.kuleuven.be/cwis/email_disclaimer.htm</a> for more information.</font> <br>
</div><br>_______________________________________________<br>rules-users mailing list<br><a href="mailto:rules-users@lists.jboss.org" target="_blank">rules-users@lists.jboss.org</a><br><a href="https://lists.jboss.org/mailman/listinfo/rules-users" target="_blank">https://lists.jboss.org/mailman/listinfo/rules-users</a><br>
<br></blockquote></div></div></div><br></blockquote></div><br>