Eric D. Schabell: Red Hat JBoss BPM Suite - changing the default roles for LDAP configuration

Monday, March 24, 2014

Red Hat JBoss BPM Suite - changing the default roles for LDAP configuration



When setting up your JBoss BPM Suite using LDAP to leverage an enterprises existing roles and users, there is a pretty good chance that the existing default roles are already taken.

What can you do to modify these roles: admin, developer, analyst, user, and manager in the default deployment of JBoss BPM Suite?

Well we can modify these in the workbench configuration and ensure that you have five unique LDAP based roles available that conform to your enterprise standard operating procedures as follows.

# Edit the file found in the deployments directory of your jboss server,
# business-central.war/WEB-INF/classes/workbench-policy.properties and
# at the bottom you will find the following entries that can be adjusted
# to the LDAP roles you would like to assign to each.
#
roles.wb_everything=admin
roles.wb_for_developers=developer
roles.wb_for_business_analysts=analyst
roles.wb_for_business_users=user
roles.wb_for_managers=manager


# You will also need to adjust the file found in the deployments directory 
# of your jboss server at business-central.war/WEB-INF/web.xml to adjust 
# to match your new LDAP roles. The following entries are shown with the 
# original five roles, adjust the 'role-name' to the new roles as needed.
#

    Administrator - Administrates the BPMS system. Has full 
      access rights to make any changes necessary. Also has the
      ability to add and remove users from the system.
    
    admin



    Analyst - Responsible for creating and designing processes
      into the system. Creates process flows and handles
      process change requests. Needs to test processes that
      they create. Also creates forms and dashboards.
    
    analyst



    Developer - Implements code required for process to work. 
      Mostly uses the JBDS connection to view processes, but may use the
      web tool occasionally.
    
    developer



    Business user - Daily user of the system to take actions 
      on business tasks that are required for the processes to continue 
      forward. Works primarily with the task lists.
    
    user



    Manager/Viewer-only User - Viewer of the system that is 
      interested in statistics around the  business processes and their 
      performance, business indicators, and other reporting of the system 
      and people who interact with the system.
    
    manager


This tip is brought to you by our very own Adam Baxter, feel free to connect and thank him for his work.