Package com.flowable.platform.security.permission

Class TaskPermissionServiceImpl

java.lang.Object

com.flowable.platform.security.service.AbstractPlatformSecurityService

com.flowable.platform.security.permission.TaskPermissionServiceImpl

All Implemented Interfaces:

PermissionService, PermissionServiceRegistryAware, TaskPermissionService, Aware

public class TaskPermissionServiceImpl
extends AbstractPlatformSecurityService
implements TaskPermissionService

Field Summary

Fields

Modifier and Type	Field	Description
protected CmmnHistoryService	cmmnHistoryService
protected HistoryService	historyService
protected PlatformIdentityService	identityService
protected String	participantCandidateGroups

Fields inherited from class com.flowable.platform.security.service.AbstractPlatformSecurityService

additionalAdminUsers, CASE_PREFIX, cmmnRepositoryService, cmmnRuntimeService, cmmnTaskService, defaultSecurityPolicyKey, defaultSecurityPolicyModel, EXTERNAL_WORKER_PREFIX, inspectEnabled, permissionServiceRegistry, platformSecurityInterceptor, policyRepositoryService, PROCESS_PREFIX, repositoryService, runtimeService, SECURITY_POLICY_MODEL, TASK_PREFIX, taskService

Constructor Summary

Constructors

Constructor	Description
TaskPermissionServiceImpl(String participantCandidateGroups)

Method Summary

Modifier and Type	Method	Description
protected boolean	checkPermissionInCaseParent(String casePermission, SecurityPolicyModel securityPolicyModel)
protected boolean	checkPermissionInProcessParent(String processPermission, SecurityPolicyModel securityPolicyModel)
List<String>	fetchPermissionsForHistoricScope(String scopeId, boolean checkWritePermissionInParent, String userId, Set<String> groupKeys, String tenantId)
List<String>	fetchPermissionsForHistoricScope(String scopeId, String userId, Set<String> groupKeys, String tenantId)
List<String>	fetchPermissionsForRuntimeScope(String scopeId, boolean checkWritePermissionInParent, String userId, Set<String> groupKeys, String tenantId)
List<String>	fetchPermissionsForRuntimeScope(String scopeId, String userId, Set<String> groupKeys, String tenantId)
protected HistoricTaskInstance	getHistoricTask(String taskId, String tenantId)
List<String>	getHistoricTaskPermissions(String taskId, String taskDefinitionKey, String instanceId, String definitionId, String scopeType, String assignee, String owner, List<? extends IdentityLinkInfo> identityLinks, String tenantId)
protected ProcessInstance	getProcessInstance(String processInstanceId, String tenantId)
List<String>	getRuntimeTaskPermissions(String taskId, String taskDefinitionKey, String instanceId, String definitionId, String scopeType, String assignee, String owner, List<? extends IdentityLinkInfo> identityLinks, String tenantId)
String	getScopeType()	The scope type that this permissions service supports.
SecurityPolicyModel	getSecurityPolicyModelForCaseInstance(String caseInstanceId)
SecurityPolicyModel	getSecurityPolicyModelForProcessInstance(String processInstanceId)
Task	getTask(String taskId, String tenantId)
Collection<IdentityLink>	getTaskCandidateTypes(Task task)
protected boolean	hasPermission(String permission, String assignee, String owner, List<? extends IdentityLinkInfo> identityLinks, SecurityPolicyModel securityPolicyModel)
protected boolean	hasPermissionForAdhocTask(String permission, String parentTaskId, boolean isHistoricInstance, String assignee, String owner, List<? extends IdentityLinkInfo> identityLinks, String userId, Set<String> groupKeys, String tenantId)
boolean	hasPermissionForHistoricScope(String permission, String scopeId, String userId, Set<String> groupKeys, String tenantId)
protected boolean	hasPermissionForHistoricTask(String permission, HistoricTaskInstance historicTaskInstance, String userId, Set<String> groupKeys, String tenantId)
boolean	hasPermissionForRuntimeScope(String permission, String scopeId, String userId, Set<String> groupKeys, String tenantId)
protected boolean	hasPermissionForRuntimeTask(String permission, Task task, String userId, Set<String> groupKeys, String tenantId)
boolean	hasPermissionForScope(String permission, String scopeId, String userId, Set<String> groupKeys, String tenantId)
protected boolean	hasPermissionForTaskInCase(String permission, String taskDefinitionKey, boolean isHistoricInstance, String assignee, String owner, List<? extends IdentityLinkInfo> identityLinks, String caseInstanceId, String caseDefinitionId, String userId, Set<String> groupKeys, String tenantId)
protected boolean	hasPermissionForTaskInProcess(String permission, String taskDefinitionKey, boolean isHistoricInstance, String assignee, String owner, List<? extends IdentityLinkInfo> identityLinks, String processInstanceId, String processDefinitionId, String userId, Set<String> groupKeys, String tenantId)
protected boolean	hasPermissionOnParentTask(String permission, String parentTaskId, boolean isHistoricInstance, String assignee, String owner, List<? extends IdentityLinkInfo> identityLinks, String userId, Set<String> groupKeys, String tenantId)
boolean	hasReadPermissionOnScopeDefinition(String scopeDefinitionId, String scopeDefinitionKey, String userId, Set<String> groupKeys, String tenantId)
protected List<String>	translateParentPermissions(List<String> parentPermissions, String scopeType)
void	validateAssigneeValue(Task task, String newAssignee)
void	validateParticipantValue(Task task, String newParticipant)

Methods inherited from class com.flowable.platform.security.service.AbstractPlatformSecurityService

currentUserHasAdminRights, currentUserIsSuperAdmin, fetchCasePermissionMappings, fetchCasePermissionMappings, fetchCaseSecurityPolicyModel, fetchPermissions, fetchPermissionsForTask, fetchProcessPermissionMappings, fetchProcessPermissionMappings, fetchProcessSecurityPolicyModel, fetchSecurityPolicyModel, fetchSecurityPolicyModel, fetchSecurityPolicyModelForCaseInstance, fetchSecurityPolicyModelForProcessInstance, fetchSecurityPolicyModelForTask, fetchSecurityPolicyModelForTask, fetchTaskPermissionMappings, fetchTaskPermissionMappings, fetchTaskPermissionMappings, fetchTaskPermissionMappingsForCase, fetchTaskPermissionMappingsForProcess, fetchTaskSecurityPolicyModelForCase, fetchTaskSecurityPolicyModelForProcess, filterPermissionsForRole, getCmmnExtensionElementValue, getCurrentGroupKeys, getCurrentSecurityScope, getCurrentTenantId, getCurrentUserId, getDefaultSecurityPolicyModel, getExtensionElementValue, getSecurityPolicyModelByKey, groupOrUserMatches, groupOrUserMatches, hasAnyMatchingIdentityLink, hasAssigneeOrOwnerIdentityLink, hasPermissionForEntityLinks, hasPermissionForHistoricEntityLinks, setPermissionServiceRegistry, translatePermissionForScope

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface com.flowable.platform.security.permission.PermissionService

validatePermissionForHistoricScope, validatePermissionForRuntimeScope, validatePermissionForScope, validatePermissionsForHistoricScope, validatePermissionsForRuntimeScope, validateReadPermissionOnScopeDefinition

Field Details

historyService

@Autowired(required=false)
protected HistoryService historyService

cmmnHistoryService

@Autowired(required=false)
protected CmmnHistoryService cmmnHistoryService

identityService

@Autowired(required=false)
protected PlatformIdentityService identityService

participantCandidateGroups

protected String participantCandidateGroups

Constructor Details

TaskPermissionServiceImpl

public TaskPermissionServiceImpl(String participantCandidateGroups)

Method Details

getScopeType

public String getScopeType()

Description copied from interface: PermissionService

The scope type that this permissions service supports.

Specified by:

getScopeType in interface PermissionService

hasPermissionForScope

public boolean hasPermissionForScope(String permission,
 String scopeId,
 String userId,
 Set<String> groupKeys,
 String tenantId)

Specified by:

hasPermissionForScope in interface PermissionService

hasPermissionForRuntimeScope

public boolean hasPermissionForRuntimeScope(String permission,
 String scopeId,
 String userId,
 Set<String> groupKeys,
 String tenantId)

Specified by:

hasPermissionForRuntimeScope in interface PermissionService

fetchPermissionsForRuntimeScope

public List<String> fetchPermissionsForRuntimeScope(String scopeId,
 String userId,
 Set<String> groupKeys,
 String tenantId)

Specified by:

fetchPermissionsForRuntimeScope in interface PermissionService

fetchPermissionsForRuntimeScope

public List<String> fetchPermissionsForRuntimeScope(String scopeId,
 boolean checkWritePermissionInParent,
 String userId,
 Set<String> groupKeys,
 String tenantId)

Specified by:

fetchPermissionsForRuntimeScope in interface PermissionService

hasPermissionForHistoricScope

public boolean hasPermissionForHistoricScope(String permission,
 String scopeId,
 String userId,
 Set<String> groupKeys,
 String tenantId)

Specified by:

hasPermissionForHistoricScope in interface PermissionService

fetchPermissionsForHistoricScope

public List<String> fetchPermissionsForHistoricScope(String scopeId,
 String userId,
 Set<String> groupKeys,
 String tenantId)

Specified by:

fetchPermissionsForHistoricScope in interface PermissionService

fetchPermissionsForHistoricScope

public List<String> fetchPermissionsForHistoricScope(String scopeId,
 boolean checkWritePermissionInParent,
 String userId,
 Set<String> groupKeys,
 String tenantId)

Specified by:

fetchPermissionsForHistoricScope in interface PermissionService

getRuntimeTaskPermissions

public List<String> getRuntimeTaskPermissions(String taskId,
 String taskDefinitionKey,
 String instanceId,
 String definitionId,
 String scopeType,
 String assignee,
 String owner,
 List<? extends IdentityLinkInfo> identityLinks,
 String tenantId)

Specified by:

getRuntimeTaskPermissions in interface TaskPermissionService

getHistoricTaskPermissions

public List<String> getHistoricTaskPermissions(String taskId,
 String taskDefinitionKey,
 String instanceId,
 String definitionId,
 String scopeType,
 String assignee,
 String owner,
 List<? extends IdentityLinkInfo> identityLinks,
 String tenantId)

Specified by:

getHistoricTaskPermissions in interface TaskPermissionService

hasReadPermissionOnScopeDefinition

public boolean hasReadPermissionOnScopeDefinition(String scopeDefinitionId,
 String scopeDefinitionKey,
 String userId,
 Set<String> groupKeys,
 String tenantId)

Specified by:

hasReadPermissionOnScopeDefinition in interface PermissionService

getSecurityPolicyModelForProcessInstance

public SecurityPolicyModel getSecurityPolicyModelForProcessInstance(String processInstanceId)

Specified by:

getSecurityPolicyModelForProcessInstance in interface TaskPermissionService

getSecurityPolicyModelForCaseInstance

public SecurityPolicyModel getSecurityPolicyModelForCaseInstance(String caseInstanceId)

Specified by:

getSecurityPolicyModelForCaseInstance in interface TaskPermissionService

hasPermissionForRuntimeTask

protected boolean hasPermissionForRuntimeTask(String permission,
 Task task,
 String userId,
 Set<String> groupKeys,
 String tenantId)

hasPermissionForHistoricTask

protected boolean hasPermissionForHistoricTask(String permission,
 HistoricTaskInstance historicTaskInstance,
 String userId,
 Set<String> groupKeys,
 String tenantId)

hasPermissionForTaskInProcess

protected boolean hasPermissionForTaskInProcess(String permission,
 String taskDefinitionKey,
 boolean isHistoricInstance,
 String assignee,
 String owner,
 List<? extends IdentityLinkInfo> identityLinks,
 String processInstanceId,
 String processDefinitionId,
 String userId,
 Set<String> groupKeys,
 String tenantId)

hasPermissionForTaskInCase

protected boolean hasPermissionForTaskInCase(String permission,
 String taskDefinitionKey,
 boolean isHistoricInstance,
 String assignee,
 String owner,
 List<? extends IdentityLinkInfo> identityLinks,
 String caseInstanceId,
 String caseDefinitionId,
 String userId,
 Set<String> groupKeys,
 String tenantId)

hasPermissionForAdhocTask

protected boolean hasPermissionForAdhocTask(String permission,
 String parentTaskId,
 boolean isHistoricInstance,
 String assignee,
 String owner,
 List<? extends IdentityLinkInfo> identityLinks,
 String userId,
 Set<String> groupKeys,
 String tenantId)

hasPermissionOnParentTask

protected boolean hasPermissionOnParentTask(String permission,
 String parentTaskId,
 boolean isHistoricInstance,
 String assignee,
 String owner,
 List<? extends IdentityLinkInfo> identityLinks,
 String userId,
 Set<String> groupKeys,
 String tenantId)

hasPermission

protected boolean hasPermission(String permission,
 String assignee,
 String owner,
 List<? extends IdentityLinkInfo> identityLinks,
 SecurityPolicyModel securityPolicyModel)

getTask

public Task getTask(String taskId,
 String tenantId)

Specified by:

getTask in interface TaskPermissionService

getHistoricTask

protected HistoricTaskInstance getHistoricTask(String taskId,
 String tenantId)

getProcessInstance

protected ProcessInstance getProcessInstance(String processInstanceId,
 String tenantId)

translateParentPermissions

protected List<String> translateParentPermissions(List<String> parentPermissions,
 String scopeType)

checkPermissionInProcessParent

protected boolean checkPermissionInProcessParent(String processPermission,
 SecurityPolicyModel securityPolicyModel)

checkPermissionInCaseParent

protected boolean checkPermissionInCaseParent(String casePermission,
 SecurityPolicyModel securityPolicyModel)

validateAssigneeValue

public void validateAssigneeValue(Task task,
 String newAssignee)

Specified by:

validateAssigneeValue in interface TaskPermissionService

validateParticipantValue

public void validateParticipantValue(Task task,
 String newParticipant)

Specified by:

validateParticipantValue in interface TaskPermissionService

getTaskCandidateTypes

public Collection<IdentityLink> getTaskCandidateTypes(Task task)

Specified by:

getTaskCandidateTypes in interface TaskPermissionService