Package com.flowable.platform.security.permission

Interface ProcessPermissionService

All Superinterfaces:

PermissionService

All Known Implementing Classes:

ProcessPermissionServiceImpl

public interface ProcessPermissionService
extends PermissionService

Method Summary

Modifier and Type	Method	Description
SecurityPolicyModel	fetchSecurityPolicyModelForProcessInstance(String processDefinitionId, String tenantId)
org.flowable.engine.history.HistoricProcessInstance	getHistoricProcessInstance(String processInstanceId, String tenantId)
List<String>	getHistoricProcessPermissions(String processInstanceId, String definitionId, List<? extends org.flowable.identitylink.api.IdentityLinkInfo> identityLinks, String tenantId)
org.flowable.engine.runtime.ProcessInstance	getProcessInstance(String processInstanceId, String tenantId)
List<String>	getRuntimeProcessPermissions(String processInstanceId, String definitionId, List<? extends org.flowable.identitylink.api.IdentityLinkInfo> identityLinks, String tenantId)
boolean	hasPermissionForHistoricProcessInstance(String permission, org.flowable.engine.history.HistoricProcessInstance processInstance, String userId, Set<String> groupKeys, String tenantId)
boolean	hasPermissionForProcessInstance(String permission, org.flowable.engine.runtime.ProcessInstance processInstance, String userId, Set<String> groupKeys, String tenantId)
Collection<org.flowable.identitylink.api.IdentityLinkInfo>	resolveCandidateIdentityLinks(String processInstanceId, String processDefinitionId)	Resolves the identity links used to filter the assignee candidate list of a running process instance.
void	validateParticipantValue(org.flowable.engine.runtime.ProcessInstance processInstance, String participantCandidateGroups, String userId, Set<String> groupKeys, String tenantId)
void	validatePermissionForHistoricProcessInstance(String permission, org.flowable.engine.history.HistoricProcessInstance processInstance, String userId, Set<String> groupKeys, String tenantId)
void	validatePermissionForProcessInstance(String permission, org.flowable.engine.runtime.ProcessInstance processInstance, String userId, Set<String> groupKeys, String tenantId)

Methods inherited from interface com.flowable.platform.security.permission.PermissionService

fetchPermissionsForHistoricScope, fetchPermissionsForHistoricScope, fetchPermissionsForRuntimeScope, fetchPermissionsForRuntimeScope, getScopeType, hasPermissionForHistoricScope, hasPermissionForRuntimeScope, hasPermissionForScope, hasReadPermissionOnScopeDefinition, validatePermissionForHistoricScope, validatePermissionForRuntimeScope, validatePermissionForScope, validatePermissionsForHistoricScope, validatePermissionsForRuntimeScope, validateReadPermissionOnScopeDefinition

Method Details

validateParticipantValue

void validateParticipantValue(org.flowable.engine.runtime.ProcessInstance processInstance,
 String participantCandidateGroups,
 String userId,
 Set<String> groupKeys,
 String tenantId)

validatePermissionForProcessInstance

void validatePermissionForProcessInstance(String permission,
 org.flowable.engine.runtime.ProcessInstance processInstance,
 String userId,
 Set<String> groupKeys,
 String tenantId)

hasPermissionForProcessInstance

boolean hasPermissionForProcessInstance(String permission,
 org.flowable.engine.runtime.ProcessInstance processInstance,
 String userId,
 Set<String> groupKeys,
 String tenantId)

validatePermissionForHistoricProcessInstance

void validatePermissionForHistoricProcessInstance(String permission,
 org.flowable.engine.history.HistoricProcessInstance processInstance,
 String userId,
 Set<String> groupKeys,
 String tenantId)

hasPermissionForHistoricProcessInstance

boolean hasPermissionForHistoricProcessInstance(String permission,
 org.flowable.engine.history.HistoricProcessInstance processInstance,
 String userId,
 Set<String> groupKeys,
 String tenantId)

getProcessInstance

org.flowable.engine.runtime.ProcessInstance getProcessInstance(String processInstanceId,
 String tenantId)

getHistoricProcessInstance

org.flowable.engine.history.HistoricProcessInstance getHistoricProcessInstance(String processInstanceId,
 String tenantId)

getRuntimeProcessPermissions

List<String> getRuntimeProcessPermissions(String processInstanceId,
 String definitionId,
 List<? extends org.flowable.identitylink.api.IdentityLinkInfo> identityLinks,
 String tenantId)

getHistoricProcessPermissions

List<String> getHistoricProcessPermissions(String processInstanceId,
 String definitionId,
 List<? extends org.flowable.identitylink.api.IdentityLinkInfo> identityLinks,
 String tenantId)

fetchSecurityPolicyModelForProcessInstance

SecurityPolicyModel fetchSecurityPolicyModelForProcessInstance(String processDefinitionId,
 String tenantId)

resolveCandidateIdentityLinks

Collection<org.flowable.identitylink.api.IdentityLinkInfo> resolveCandidateIdentityLinks(String processInstanceId,
 String processDefinitionId)

Resolves the identity links used to filter the assignee candidate list of a running process instance.

Parameters:

processInstanceId - the id of the process instance to resolve identity links for.

processDefinitionId - the id of the process definition; used to read the candidates-type extension element.

Returns:

the identity links to restrict the candidate list to, or an empty collection when no candidates-type filter is configured, the configured value is unrecognized, or the filter resolves to no users/groups. Callers treat an empty collection as "no filter applied" (all users eligible), mirroring the task candidate behaviour.