Details
-
Task
-
Resolution: Fixed
-
L3 - Default
-
None
-
None
Description
Authorization.xml: The statement <sql id="authCheck"> uses a "CASE" clause not supported on some databases (e.g. DB2 on z/OS).
This statement should never be called if the ProcessEngineConfiguration.authorizationEnabled flag is set to false. But currently it is still called - so we need to patch this statement to some "SELECT 1;" pseudo statement.
see https://groups.google.com/forum/#!msg/camunda-bpm-dev/ihfyczFenHY/DONyGLCkcaYJ
Currently the statement is at least triggered from the webapp (UserAuthtenticationRessource, line 108f):
// check user's app authorizations
AuthorizationService authorizationService = processEngine.getAuthorizationService();
HashSet<String> authorizedApps = new HashSet<String>();
for (String application: APPS) {
if (isAuthorizedForApp(authorizationService, username, groupIds, application))
}