John Bize [https://community.jboss.org/people/jbize] created the discussion "Re: jBPM Users and Roles using JEE security" To view the discussion, visit: https://community.jboss.org/message/716602#716602 -------------------------------------------------------------- Thanks Mauricio, I believe you're saying I have to impliment the UserGroupCallback interface and register that class with the UserGroupCallbackManager singleton.  Is that correct?  Is that only for the MinaTaskServer? The JEE security occurrs in the context of a user session, so in that context, I can't obtain the user and group information for a different user, only the authenticated user. (If there's no other way, my authentication provider does have an available RESTful API that I can use if necessary.  I would prefer not to if I don't have to.) But let me backup.  We have a single application on a single application server.  It would be preferable to not have to use an external (Mina) task server.  Is there a way to do this entirely within the session context?  If not, is there a way to do this entirely within the one application (WAR) without exposing an external Mina Server? Thanks, John -------------------------------------------------------------- Reply to this message by going to Community [https://community.jboss.org/message/716602#716602] Start a new discussion in jBPM at Community [https://community.jboss.org/choose-container!input.jspa?contentType=1&...]

John Bize [https://community.jboss.org/people/jbize] created the discussion "Re: jBPM Users and Roles using JEE security" To view the discussion, visit: https://community.jboss.org/message/716623#716623 -------------------------------------------------------------- Thanks again Mauricio, Unfortunately, my work environment is not on the Internet.  My internet access is via an email/browser station with very limited functionality.  Just importing files from the Internet is a tedious, administrative, and time consuming process.  Exporting to the Internet is nearly impossible; I'm afraid I can't provide any code. I am using jBPM version 5.2.0.Final.  I appreciate being able to expose the task server bean as a JNDI resource, but for now, our plan is to have our one app be the one-stop-shop.  I see the LocalTaskService and LocalHumanTaskService classes in the org.jbpm.task.service.local package.  Are these the classes I need to start a local task server inside my application?  If so, I'll try to Google for examples.  Are they independant, or do I need both?  Will I still interact via a TaskClient?  Can I do this and still use the custom UserGroupCallback? I'm sorry I was confusing about the user session info.  The JEE realm will not provide me any information beyond HttpServletRequest.getRemoteUser(), and HttpServletRequest.isUserInRole("role_name").  The application/database doesn't know about provisioned users, it only knows the identity string of the current user within the context of a user's session.  (It does know about roles/groups, as membership requirements are all over the application, granting access to pages, data, resources, etc.)  So, in a session scoped bean, I could implement the UserGroupCallback as long as the only user was the current user.  I suspect that won't be possible however, and I'll have to go outside the realm and use the external RESTful interface.  I hope that's more understandable. -------------------------------------------------------------- Reply to this message by going to Community [https://community.jboss.org/message/716623#716623] Start a new discussion in jBPM at Community [https://community.jboss.org/choose-container!input.jspa?contentType=1&...]

Mauricio Salatino [https://community.jboss.org/people/salaboy21] created the discussion "Re: jBPM Users and Roles using JEE security" To view the discussion, visit: https://community.jboss.org/message/717312#717312 -------------------------------------------------------------- You can find any working example of what? Did you try the LDAP example and replicate that for the JEE realm? Cheers -------------------------------------------------------------- Reply to this message by going to Community [https://community.jboss.org/message/717312#717312] Start a new discussion in jBPM at Community [https://community.jboss.org/choose-container!input.jspa?contentType=1&...]