Questions Tagged With user

Can we support email address as ivy admin user?

skilchenmann — Fri, 22 Feb 2019 05:05:02 -0500

We tried the following config:

SystemDb:
  Driver: org.postgresql.Driver
  Url: jdbc:postgresql://db:5432/AxonIvySystemDatabase
  UserName: admin
  Password: 1234
  Autoconvert: false
Administrators:
  customer@email.com:
    Password: GeneratedPassword
    Email: customer@email.com

but if fails - are there any plan to support email as user?

Cheers

who can run a task vs who can see a task

Mohammed Shabana — Mon, 21 Jan 2019 03:20:48 -0500

Hi,

Is it possible to make a task visible to a specified ROLE but only one user can Run it ?

illustration : i want to assign a task to a user in a specific department, but i also want all the users in that department to be able to see the task and track it, but they cannot work on it.

a work-around i came up with is to assign the task to the whole department, but hide the "run" button based on a custom field value in the task. also I added another layer of authentication when the task starts in order to increase security.(see the diagram )

is this work-around secure ?

is there a general solution for this issue ?

i am using v 7.0.2

Remove User in Axon.Ivy Designer

Thomas Wirz — Thu, 10 Jan 2019 08:18:00 -0500

For a Testcase i need to remove a user on which we have allready Tasks in designer. When I remove the User in User Editor he ist still existing in ISecurityContext.getUsers(). Only when i close the designer and reopen it the user is removed. But than also all tasks are away.

Is there a way to remove the User without closing Axon.Ivy Designer?

How to set information for logon IUser without permanently store to system?

thienqh — Tue, 25 Apr 2017 23:47:53 -0400

Hi,

I would like to implement a function to allow all user to share 1 common account for authenticating. That mean a user will have a token, storing his information such as Full Name, Email Address, etc. and he will use this token to login with the common account

IUser user = Ivy.session().getSecurityContext().findUser(COMMON_ACCOUNT);

To specify the information of logon user, I will use information from token.

user.setFullName(token.getFullName());
user.setEmailAddress(token.getEmailAddress());

I only want these information temporary store in the session, and would be wiped out after user logout. But, by calling these IUser APIs, these information are persisted to system. Is there any good way to do that? Thanks

Create case with different user

peter_muc — Mon, 24 Apr 2017 09:29:28 -0400

Do you have an advise/idea how we can implement following requirement in Ivy:

An Ivy Webservice gets called from User A.
The Webservice process triggers another Ivy Business Process with the help of the "TriggerElement".
The triggered Business Process should have as CaseCreator a User B not User A. (can we maybe set the User B as active user before we trigger the Business Process?)

Thank you in advance!

How to extend a user session time programmatically?

Emmanuel — Fri, 31 Mar 2017 10:47:49 -0400

Dear Ivy support,

Using Ivy 6.2 we set the User session time-out value in the web.xml. Is there a way to extend the session validity programmatically without any User action?

In a JSF context, would this method have any effect on the Ivy Session ? javax.faces.context.ExternalContext.setSessionMaxInactiveInterval(int interval) Specifies the time, in seconds, between client requests before the servlet container will invalidate this session.

Thanks in advance Emmanuel

Local and AD Users

Thomas Wirz — Fri, 17 Feb 2017 07:53:42 -0500

We synchronize our users with the AD. Is it possible to add local Users not existing in AD to the users? How can we do this, the Button for adding an user is disabled in the Axon.Ivy Administration. Can we add them in the application by code?

Assign and revoke Role to Session User dynamically

Emmanuel — Thu, 31 Mar 2016 10:26:20 -0400

Hello,

I need to assign and revoke Ivy Role dynamically on the session user. If I understand the API documentation well, the following method assigns the given role to the session, the role should be automatically unassigned after logout: Ivy.session().assignRole(role);

Here the API documentation:

@PublicAPI(value=EXPERT) Assigns a role to the session. Parameters:role The role to assign

The problem is that I need also to revoke an Ivy Role dynamically, I could not find a method like Ivy.session().revokeRole(IRole role) or Ivy.session().unassignRole(Irole role). Is there a possibility to do that?

Thanks a lot in advance.

Emmanuel

Assign user Tasks to another (user will be deleted)

Emmanuel — Fri, 12 Feb 2016 09:16:11 -0500

Good morning,

Is there a possibility to assign all the tasks owned by a user to another one? In that case the first user. Thanks a lot in advance

Emmanuel

Task for every user with a specific Role (dynamically)

rhorber — Thu, 07 Jan 2016 15:37:10 -0500

Is it possible to create a task which has to be completed by every user of a specific role, which should be determined dynamically? I.e. if I have three users which own a role, all three users have to complete this task. The more convinient way would be, if all three get an own task in ther "Personal Task List".

Thanks in advance for any answers.

Can not login with synchronized user from active directory

SupportIvyTeam — Fri, 04 Dec 2015 14:57:14 -0500

The user is synchronized with the active directory, but I can not login with it. In the log there is the following message:

Caused by: javax.naming.NameNotFoundException: [LDAP: error code 32 - 0000208D: NameErr: DSID-03100213, problem 2001 (NO_OBJECT), data 0, best match of:
    ''NULL]; remaining name '/'
    at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3160)
    at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:3081)
    at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2888)
    at com.sun.jndi.ldap.LdapCtx.searchAux(LdapCtx.java:1846)
    at com.sun.jndi.ldap.LdapCtx.c_search(LdapCtx.java:1769)
    at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search(ComponentDirContext.java:392)
    at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeDirContext.java:358)
    at javax.naming.directory.InitialDirContext.search(InitialDirContext.java:276)
    at ch.ivyteam.ivy.security.internal.jndi.dircontext.LazyBindingDirContextAccess.search(LazyBindingDirContextAccess.java:47)
    at ch.ivyteam.ivy.security.internal.jndi.JndiSecuritySystem$3$1.execute(JndiSecuritySystem.java:1063)
    at ch.ivyteam.ivy.security.internal.jndi.JndiSecuritySystem$3$1.execute(JndiSecuritySystem.java:1)
    at ch.ivyteam.ivy.security.internal.jndi.JndiSecuritySystem.execute(JndiSecuritySystem.java:613)
    at ch.ivyteam.ivy.security.internal.jndi.JndiSecuritySystem$3.call(JndiSecuritySystem.java:1058)
    at ch.ivyteam.ivy.security.internal.jndi.JndiSecuritySystem$3.call(JndiSecuritySystem.java:1)
    at ch.ivyteam.ivy.security.internal.jndi.JndiSecuritySystem.executeWithCachedContext(JndiSecuritySystem.java:637)

How can I create an ivy Test User from a registeration page ?

Patrick — Thu, 12 Nov 2015 16:48:04 -0500

Hello everybody,

How can I create a test user in the ivy designer from a registration page(html dialog) ? Is there a way with ivy scrip ?

Thanks for your awnsers, Patrick Bühlmann

Creating a new user programmatically

Björn — Wed, 21 Oct 2015 12:13:54 -0400

I would like to realize the following scenario: Let's say, we have a website publicaly accessible (e-gov-platform). There is a link to a Process Start (HTTP Request). The first activity of this process should be a login/registration form. If the user has already an account, he should be able to login with username and password (for this part this answer is helpful). If not, he should be able to register a new user with a typical registration form. And here I'm stucked: In the public API I cannot find a method to create a new user. Am I searching in the wrong direction?

Kind regards Björn

Database password encryption

dbalasse — Thu, 30 Jul 2015 18:34:55 -0400

I've seen in the IWA_User table that password are encrypted. Is it possible to know which enprytion is used ? Is it possible to configure another ?

How to map AD group to Ivy role?

Adrian Imfeld — Thu, 23 Jul 2015 12:24:42 -0400

We like to manage the rights for our ivy applications over the Microsoft Active Directory. According the AD groups, ivy roles should automatically added to the ivy user. We have in mind to build some technical processes to do that. But we have some questions...

Is it possible to read (lower) OU's of a user?
If we have the OU "ivy" to import all users and there is a OU "admin" under the OU "ivy", can we find out which users are in the OU "admin"? How can we get this information. Maybe some how like reading AD attributes?

Is it possible to listen to the LDAP synchronisation of the ivy server?
Every times when the user synchronisation is finished, our code should be executed to add specified ivy roles to the user based on the AD OU's.

Thank you for your support

How to reassign tasks of users that are absent

dbalasse — Wed, 04 Mar 2015 15:36:58 -0500

If a user is ill or on vacation, how can we re-assign all of his existing tasks to another user ? What about the new taks that will be assign to him, can we automatically transfer those to another user ?

How to avoid IllegalStateException during login & logout in a Script-Step?

Nikel Weis — Thu, 15 May 2014 11:30:21 -0400

We have a certain situation where the current named user shall be logged out and be logged in as a different user. The problem is, that this results in an illegal task state. Code in the script step:

ivy.session.loginSessionUser("user1", "user1");

if(in.isSuperior == true) {
    ivy.session.loginSessionUser("superiorUser", "superiorUser");
    }

Exception:

Exception at element [13B4B87B3A16CFA4-f15-io0]: java.lang.IllegalStateException: State of Task must be one of the following values CREATED, RESUMED but is ZOMBIE:

Is there a way to avoid this behavoir?

Xpert.ivy 4.3. - error occurs on Designer & Server level.

can I check what are Users online or offline in xpert ivy use IUSER ?

toantp — Thu, 27 Feb 2014 06:37:16 -0500

can I check what are Users online or offline in xpertivy use IUSER ?

PermissionDeniedException when calling iUser.getAllRoles()

Tran Cuong Truc — Wed, 26 Feb 2014 05:16:00 -0500

My call to

aUser.getAllRoles();

throws the exception:

PermissionDeniedException: Session 1 (cuongtruc.tran) is not allowed to call method public java.util.List ch.ivyteam.ivy.security.internal.User.getAllRoles(). The session does not fulfill the permission rule SESSION (MATCHES THIS AND OWNS UserReadOwnRoles PERMISSION) OR OWNS UserReadRoles PERMISSION OR OWNS UserReadRoles@SYSTEM PERMISSION

I even tried with grant admin permisson to that user but still throws the same exception.

How to authenticate a user that is provided by a Single Sign On (SSO) proxy.

ahatius — Sat, 25 Jan 2014 15:28:14 -0500

We've got a SSO-Proxy for most of our web applications. I'd like to make use of the SSO-Proxy instead of requiring the user to login with his Windows credentials.

I've figured out how I can read the HTTP header containing the user-id. Now I'd like to authenticate as this user, but all provided methods require a password. Is there anyway I can authenticate a user only by his user-id?

This is what I've got to get the user-id:

package ch.company.ivy.security;

import java.util.Map;

import javax.faces.context.FacesContext;

public class Auth {
    Map<String, String> headers;
    String userId;

    public Auth() {
        headers = FacesContext.getCurrentInstance().getExternalContext().getRequestHeaderMap();
        userId = headers.get("UID").toString();
    }

    public String getUserId() {
        return this.userId;
    }
}

Is it possible to authentication an application user like a system administrator?

toantp — Wed, 15 Jan 2014 08:54:25 -0500

Hi there when I user method session.authenticateSessionUser like the way dialog login administrator used , I just authentication all user in this Application , can't found admin user of all Application the sample : when I setup Ivy server I create a user admin to login administrator (admin/admin) , but when I call session.authenticateSessionUser at my application in server I can't found admin user do we have a way to authenticate that user ? thanks a lot

Manage users of several applications by a single admin user

Stefan — Thu, 19 Dec 2013 14:42:59 -0500

xpert.ivy server: Request a task list, manage substitution, absences and so one is already limited to the appropriate WebApp the requesting user is defined in.

Is there a possibility to request tasks, manage absences etc. for all WebApps by a single admin user (defined in a WebApp) which has access to all the other WebApps on the same system/server?

How can I find a specific user case insensitive?

Thomas Kohler — Thu, 10 Nov 2011 06:44:16 -0500

I use

ivy.wf.getSecurityContext().findUser("username");

But this works case sensitive so that the same call with "USERNAME" as parameter does not find the same user.

I need to find a user case insensitive. How to do that?

Get all users for an application

Katharina Kaczmarczyk — Wed, 20 Oct 2010 05:55:06 -0400

I need to get a list with all user names in my application to display them in a combo box? But i do not find a way to do this.

Does a user have a specific role?

Benedict Groppe — Thu, 06 Aug 2009 07:02:04 -0400

I need some insights in the role system of Ivy. I currently check whether a user does have a role by checking whether the current user does have a role with the ID of that role I am interested in. One problem is that I have to hard code the ID's, another problem that the ID's are hard to retrieve and they are different on Designer and Server. Is there a more simple way to find out whether a specific user does have a specific role?

More permissions for test user in the Designer

Steffen Janthor — Fri, 13 Mar 2009 06:55:31 -0400

How can I get more permissions for test users in the Designer. I get a lot of such messages

PermissionDeniedException: User admin must have one or multiple of the following permissions SessionReadAll, SessionReadAll