L3 - Default Hello Camunda Support,
We would like to support authorization checks for Camunda Web Applications only, and not during API invoked process engine calls.
Situations in which authorization is required: • Camunda Webapplication is made accessible to users who should not have full access, even after authentication. Situations in which authorization is not required • An application completely controls the API methods invoked on the process engine.
Can you please provide any configuration options for supporting this requirement.
The org.camunda.bpm.engine.ProcessEngineConfiguration.authorizationEnabled could use a ThreadLocal, but I'm looking for alternatives to sub-classing the configuration.
Thanks,
Nick