Security information request on jBPM
by Boer (J31), Jan de
Hello jBPM community,
Capgemini is planning to implement jBPM for a large customer.
My role in this project is security advisor, but unfortunately I'm not familiar with jBPM.
Could someone from the community please inform me (or send documents) about the security aspects of jBPM. Anything will help.
Security aspects more in detail:
- Confidentiality
o Access control mechanism
o Administrator's roles
o Access to storage
- Integrity
o Ensure data not to be changed without permission by "owners" of data or process
o Ensure data not to be changed due to system problems
o Change of data will be detected
- Availablity
o Ensure access to data when needed
o Features to ensure no data loss
o Features to prevent data loss
- Non Repudiation
o Proof of access to documents and processes
o Secure logging (tamper free)
o Tampering of logfiles should be detected
Please feel free to inform me about other aspects of security.
Please contact me on jan.de.boer(a)capgemini.com<mailto:jan.de.boer@capgemini.com>
Best regards and lots of thanks in advance.
Jan
_____________________________________________________________
Jan de Boer MSIT
Capgemini / NL-Utrecht
Master of Security in the Information Technology
Managing Consultant Information Security
T. +31 30 689 02 76 / Mob. +31 6 15 03 02 76
www.nl.capgemini.com<http://www.nl.capgemini.com/>
Don't think network security and firewalls will protect your information.
The vulnerability lies in your employees.
_____________________________________________________________
Please consider the environment and only print this email if absolutely
necessary. Capgemini encourages environmental awareness.
This message contains information that may be privileged or confidential and is the property of the Capgemini Group. It is intended only for the person to whom it is addressed. If you are not the intended recipient, you are not authorized to read, print, retain, copy, disseminate, distribute, or use this message or any part thereof. If you receive this message in error, please notify the sender immediately and delete all copies of this message.
12 years, 11 months
JBPM on Apache Karaf (OSGI Runtime)
by Charles Moulliard
Hi,
I have been able to run successfully some BPMN2 examples (of the maven
project jbpm-examples) --> BPMN2-EvaluationProcess.bpmn2,
BPMN2-RuleTask.bpmn2, BPMN2-RuleTask.drl on Apache Karaf (OSGI runtime).
- Are those examples representative about what we can do with jbpm ?
- Until now, I have deployed the following jars/bundles :
jbpm-flow-builder, jbpm-flow & jbpm-bpmn2 on Karaf. Do I have to deploy
something else ?
Regards,
--
Charles Moulliard
Apache Committer / Sr. Enterprise Architect (RedHat)
Twitter : @cmoulliard | Blog : http://cmoulliard.blogspot.com
13 years
Re: [jbpm-dev] Questions on Deploying rules or exposing them as a Webservice
by Baba, Javeeduddin
Hi Tihomir,
Where can I get drools execution server war file.
And some notes on how to configure and access it.
Thanks
- Javeed
From: jbpm-dev-bounces(a)lists.jboss.org
[mailto:jbpm-dev-bounces@lists.jboss.org] On Behalf Of Baba, Javeeduddin
Sent: Friday, May 03, 2013 11:10 AM
To: Tihomir Surdilovic
Cc: jbpm-dev(a)lists.jboss.org
Subject: [jbpm-dev] Questions on Deploying rules or exposing them as a
Webservice
Hi,
I have one question. Can we , after creating rules in Guvnor or in
Eclipse IDE, deploy rule in Application server or at-least expose
these rules as a web service so that other application can use these
rules.
Thanks
- Javeed
________________________________
Note:
This message is for the named person's use only. It may contain
confidential, proprietary or legally privileged information. No
confidentiality or privilege is waived or lost by any mistransmission.
If you receive this message in error, please immediately delete it and
all copies of it from your system, destroy any hard copies of it and
notify the sender. You must not, directly or indirectly, use, disclose,
distribute, print, or copy any part of this message if you are not the
intended recipient. FTDI and any of its subsidiaries each reserve the
right to monitor all e-mail communications through its networks.
Any views expressed in this message are those of the individual sender,
except where the message states otherwise and the sender is authorized
to state them to be the views of any such entity.
Thank You.
________________________________
The information contained in this transmission is confidential information
intended for the use of the individual or entity named above.No public
posting or commercial use of this communication is permitted without the
express written permission of FTD. If the reader of this message is
not the intended recipient, you are hereby notified that any dissemination,
distribution or copying of this communication is strictly prohibited.
13 years
kie-wb: REST
by Michael Anstis
Hello,
I noticed the following when deploying kie-drools-wb on AS7:-
16:48:43,171 WARN [org.jboss.as.ee] (MSC service thread 1-4) JBAS011006:
Not installing optional component
org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher due to
exception: java.lang.ClassNotFoundException:
org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher from
[Module "deployment.kie-drools-wb-6.0.0-SNAPSHOT-jboss-as7.0.war:main" from
Service Module Loader]
at
org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:190)
[jboss-modules.jar:1.1.1.GA]
at
org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:468)
[jboss-modules.jar:1.1.1.GA]
at
org.jboss.modules.ConcurrentClassLoader.performLoadClassChecked(ConcurrentClassLoader.java:456)
[jboss-modules.jar:1.1.1.GA]
at
org.jboss.modules.ConcurrentClassLoader.performLoadClassChecked(ConcurrentClassLoader.java:423)
[jboss-modules.jar:1.1.1.GA]
at
org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:398)
[jboss-modules.jar:1.1.1.GA]
at
org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:120)
[jboss-modules.jar:1.1.1.GA]
at java.lang.Class.forName0(Native Method) [rt.jar:1.6.0_39]
at java.lang.Class.forName(Class.java:249) [rt.jar:1.6.0_39]
at
org.jboss.as.server.deployment.reflect.DeploymentClassIndex.classIndex(DeploymentClassIndex.java:54)
[jboss-as-server-7.1.1.Final.jar:7.1.1.Final]
at
org.jboss.as.ee.component.deployers.EEModuleConfigurationProcessor.deploy(EEModuleConfigurationProcessor.java:79)
at
org.jboss.as.server.deployment.DeploymentUnitPhaseService.start(DeploymentUnitPhaseService.java:113)
[jboss-as-server-7.1.1.Final.jar:7.1.1.Final]
at
org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1811)
[jboss-msc-1.0.2.GA.jar:1.0.2.GA]
at
org.jboss.msc.service.ServiceControllerImpl$StartTask.run(ServiceControllerImpl.java:1746)
[jboss-msc-1.0.2.GA.jar:1.0.2.GA]
at
java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:895)
[rt.jar:1.6.0_39]
at
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:918)
[rt.jar:1.6.0_39]
at java.lang.Thread.run(Thread.java:662) [rt.jar:1.6.0_39]
I don't know if it's significant (it's a warning) or whether it means REST
will be dead.
Anyway, for your information, as you've both been adding REST stuff.
Cheers,
Mike
13 years
6.0.0.Beta3
by Michael Biarnes Kiefer
Hello everybody,
The 6.0.0.Beta3 release, planned for the 24th May [this Friday] was postponed to the
28th May [Tuesday next week].
I ask you to push all commits that have to go into this release until 24th May (Friday) evening (24.00 CET),
so we can begin releasing on 27th (Monday).
Everything what is not pushed on the "masters" of your projects will not be taken into account for this release.
Best Regards
Michael
13 years
ask for help!
by ①↘简单爱/x™
Dear memmbers of JBPM Community:
i write this letter to ask for some examples about jbpm,i'm a java developer in xi'an ,China.my work is to do workfow and other persistence work.i work in a company that produce software for Electric company to manage their materials,and the boss let me learn jbpm for their further use,i surf to find demos about that,but in vain,i dont know how to start my thread to learn that,can you give me some ways to learn that,thank you !
13 years
next realease 6.0.0.Beta3 on Friday 24th May
by Michael Biarnes Kiefer
Hello everyone,
We have planned the next realease 6.0.0.Beta3 for the 24th May (Friday).
I ask you to push all commits that have to go into this release until 22nd May (Wednesday) evening (24.00 CET).
Everything what is not pushed on the "masters" of your projects will not be taken into account for this release.
To ensure a smooth release process I ask you to check if your projects build on Jenkins. If they don't please
do the necessary changes and fix them.
Here is the actual list [repository-list.txt] with all included projects for the release, and I hope it is up to date:
droolsjbpm-build-bootstrap
droolsjbpm-knowledge
kie-commons
drools
optaplanner
jbpm
droolsjbpm-integration
uberfire
guvnor
jbpm-form-modeler
droolsjbpm-tools
droolsjbpm-build-distribution
jbpm-designer
jbpm-console-ng
kie-wb-distribution
dashboard-builder
Cheers
Michael
13 years
jBPM support in IntelliJ IDEA 11
by Alex Chang
Hi,
I'm interested in jBPM support in IntelliJ IDEA 11 running on Mac OS X/Mountain Lion, getting confused while downloading and string up,
Please advice.
Thanks,
Alex Chang
alexc(a)skechers.com
310-406-0168
13 years
Make jBPM Designer / Guvnor / Uberfire Reusable as Components | Pure Java Based Workflow Definition
by Suminda Dharmasena
Hi,
I am writing for 2 requests:
1. Can you make the designer component based so these components can be
used separately as parts of other projects. Also make Uberfire so it can
also be used in other projects as components. Also provide developer
documentation for this. Also this this for Guvnor as parts of this can be
used in other projects.
2. Can you add ability to define workflows in jBPM and Drools as pure
Java constructs similar to Windows Workflow Foundations
Suminda
--
Suminda Sirinath Salpitikorala Dharmasena, B.Sc. Comp. & I.S. (Hon.) Lond.,
P.G.Dip. Ind. Maths. J'Pura, MIEEE, MACM, CEO Sakrīō! ▣ *Address*: 6G • 1st
Lane • Pagoda Road • Nugegoda 10250 • Sri Lanka. ▣ *Mobile*
: +94-(0)711007945 ▣ *Tele*: +94-(0)11-5 864614 / 5 875614 / 2 825908 ▣ *Web
*: http://www.sakrio.com ▣
This email is subjected to the email Terms of Use and Disclaimer:
http://www.sakrio.com/email-legal. Please read this first.
--
13 years
