I started digging into the org.jbpm.userprofile package on the grounds that it looked looke a good starting point to figure out how jBPM leverages external authentication and authorisation when dealing with actors and workflow. I stumbled upon UserProfileRepository while walking though the UserProifileManager (from the same package). According to class-level documentation in UserProfileManager retrieves and updates user profiles using a pluggable UserProfileRepository.
Thing is - in the jBPM source repository (http://sourceforge.net/projects/jbpm/files/jBPM%205/jbpm-5.2.0.Final/jbpm-5.2.0.Final-src.zip/download) there is no implementation of UserProfileRepository.
This raises a couple of issues:
- is UserProfileRepository and friends an unfinished work-in-progress?
- should I be looking somewhere else as the entry-point for integration of jBPM into an existing enterprise security framework?