Questions Tagged With role

Trigger LDAP/AD role mapping by API

mhoffmann — Tue, 10 Mar 2020 04:57:14 -0400

Cheers,

is there any way to trigger the synchronization with the LDAP / ActiveDirectory by calling an API endpoint? Or can I schedule the cron to run more than once daily?

The background is that a customer might be modifying some role mappings on demand or shortly before starting a workflow.

The version in question unfortunately is still 7.2.1, which contains a sync button in the RIA only.

How to set multiple responsible roles for a process start request

Adrian Imfeld — Thu, 07 Nov 2019 09:49:11 -0500

How can we set more than one role as "Responsible role" on a Request Start element on the Request tab. Users with different roles (not able to organize under one commen role tree node) should see a process in the portal and should be able to start it.

My workaround at the moment is to define two different start elements, which are identical except the responsible role. It works, but... If one user holds both roles, he will see two identical processes.

Thanks for help.

who can run a task vs who can see a task

Mohammed Shabana — Mon, 21 Jan 2019 03:20:48 -0500

Hi,

Is it possible to make a task visible to a specified ROLE but only one user can Run it ?

illustration : i want to assign a task to a user in a specific department, but i also want all the users in that department to be able to see the task and track it, but they cannot work on it.

a work-around i came up with is to assign the task to the whole department, but hide the "run" button based on a custom field value in the task. also I added another layer of authentication when the task starts in order to increase security.(see the diagram )

is this work-around secure ?

is there a general solution for this issue ?

i am using v 7.0.2

Old userrole mapping still remain after renaming role

trungdv — Thu, 19 Apr 2018 07:03:43 -0400

Hi ivyteam

In my project, i have the role name Front RM and i assign some users for it. Then some version later i rename that role to FrontRM (remove space). That mean all users will be mapped to FrontRM

Now i use ivy.session.getSessionUser().getRoles() but it always say that user has two roles Front RM and FrontRM.

I've investigated then see that there still remain old mapping between user and old role. That's mean when i rename a role, ivy actually add a new role with new name and keep old one with mapping. I explained in this picture:

Some questions:

Why ivy still keep old role + old mapping? it's because of multiple PMVs? But in case there is only one PMVs so could ivy remove unnecessary role completely?
Does api ivy.session.getSessionUser().getRoles() return correct roles as it display on Admin Tool? If not can i base on any flag to remove that inactive role?

Thanks

Active ivy role

nguyenbkcse — Mon, 10 Jul 2017 14:08:32 -0400

Hi every body, I used ivy API createChildRole(...) to create a new child role of an existed role, but I checked and known that the new role is not active (by calling method SecurityContext.getActiveRoles() to return a list of active roles, but the new role was not included in that list). Anyone know how to active that role by ivy API? Thank you

Adding a role in ivy engine

Alex Reich — Tue, 27 Jun 2017 08:16:51 -0400

Is there a possibility to add a role directly in ivy engine, without creating it first in designer and deploying on ivy engine. Something like createUser(String,String,String,java.util.Locale,String,String). Or is it planned to have this possibility one day in the admin page for ivy engine?

Thanks for you feedback

Possibility to change role display names without developing update procedure/update process

josef_koupal — Mon, 26 Sep 2016 15:39:41 -0400

Is there possibility to change role display names without developing such update procedure/update process ?

Somewhere in administration similar to user edit. I know there is maybe a chance to do it updating iwa_roles, which i would like to avoid. The customer want to see modified role names in workflowUi lists (all tasks - activator user/role), without changing the workflow etc.

Display name of ivy role

josef_koupal — Mon, 26 Sep 2016 14:03:59 -0400

Is there a possibility to set Ivy role the display name ? There sure is one in designer - roles editor. But i wonder if i can do such thing on server with 'living' roles. Or even those synchronized with Novell.

Assign and revoke Role to Session User dynamically

Emmanuel — Thu, 31 Mar 2016 10:26:20 -0400

Hello,

I need to assign and revoke Ivy Role dynamically on the session user. If I understand the API documentation well, the following method assigns the given role to the session, the role should be automatically unassigned after logout: Ivy.session().assignRole(role);

Here the API documentation:

@PublicAPI(value=EXPERT) Assigns a role to the session. Parameters:role The role to assign

The problem is that I need also to revoke an Ivy Role dynamically, I could not find a method like Ivy.session().revokeRole(IRole role) or Ivy.session().unassignRole(Irole role). Is there a possibility to do that?

Thanks a lot in advance.

Emmanuel

Task for every user with a specific Role (dynamically)

rhorber — Thu, 07 Jan 2016 15:37:10 -0500

Is it possible to create a task which has to be completed by every user of a specific role, which should be determined dynamically? I.e. if I have three users which own a role, all three users have to complete this task. The more convinient way would be, if all three get an own task in ther "Personal Task List".

Thanks in advance for any answers.

How to check whether role is obsolete?

hungnam — Tue, 03 Mar 2015 12:24:08 -0500

I have some roles in application which are obsolete because the pmv they belong to is deleted or archived. So my question is how to check these roles whether are obsolete, do we have API to to it? Thanks for your interested

PermissionDeniedException when calling iUser.getAllRoles()

Tran Cuong Truc — Wed, 26 Feb 2014 05:16:00 -0500

My call to

aUser.getAllRoles();

throws the exception:

PermissionDeniedException: Session 1 (cuongtruc.tran) is not allowed to call method public java.util.List ch.ivyteam.ivy.security.internal.User.getAllRoles(). The session does not fulfill the permission rule SESSION (MATCHES THIS AND OWNS UserReadOwnRoles PERMISSION) OR OWNS UserReadRoles PERMISSION OR OWNS UserReadRoles@SYSTEM PERMISSION

I even tried with grant admin permisson to that user but still throws the same exception.

is it possible to find IRoles by using "contains" or "like" as SQL statement?

nghianguyen — Wed, 22 Jan 2014 08:34:48 -0500

In currently, we can find exactly an IRole by using "ivy.wf.getSecurityContext().findRole()"

But, how can we get a list of IRoles that having same prefix name, or using a keyword to get all IRoles into a list?

Thank you very much.

How can I create a role at runtime dynamically?

nghianguyen — Mon, 20 Jan 2014 07:47:27 -0500

Is there any public APIs to make an IRole at runtime by programming?

Because in our project, we need a process to handle add/remove IRole automatically (no need to login to Ivy Server and create it by manually)

Thank you so much.