Uploaded image for project: 'camunda BPM'
  1. camunda BPM
  2. CAM-9286

Process definition query by startableBy with custom IdentityProvider is not working correctly

      Steps to reproduce:

      • custom Identity Provider is implemented (storing user-groups membeship)
      • user1 is in group1
      • process1 has camunda:candidateStarterGroups="group1"
      • I query for process definition with startebleBy=user1

      Expected result:
      process1 is returned

      Current result:
      process1 is not returned

      Hint:
      when executing the query we directly join with ACT_ID_MEMBERSHIP DB table instead of taking user-group membership from identity provider. See this line.

      Reported on forum: https://forum.camunda.org/t/startableby-issue-when-canidate-starter-groups-is-set/8549
      and https://forum.camunda.org/t/ability-to-query-for-all-process-def-that-current-user-can-start-based-on-startable-groups-prop-on-process-def/11779

        This is the controller panel for Smart Panels app

            [CAM-9286] Process definition query by startableBy with custom IdentityProvider is not working correctly

            Svetlana Dorokhova created issue -
            Svetlana Dorokhova made changes -
            Description Original: Steps to reproduce:
            * custom Identity Provider is implemented (storing user-groups membeship)
            * user1 is in group1
            * process1 has {{camunda:candidateStarterGroups="group1"}}
            * I query for process definition with {{startebleBy=user1}}

            Expected result:
            process1 is returned

            Current result:
            process1 is not returned

            Hint:
            when executing the query we directly join with {{ACT_ID_MEMBERSHIP}} DB table instead of taking user-group membership info from identity provider. See [this line|https://github.com/camunda/camunda-bpm-platform/blob/c57c013e65bdf0d8b0149a10ec2f2ccba22ed572/engine/src/main/resources/org/camunda/bpm/engine/impl/mapping/entity/ProcessDefinition.xml#L292].

            Reported on forum: https://forum.camunda.org/t/startableby-issue-when-canidate-starter-groups-is-set/8549
            New: Steps to reproduce:
            * custom Identity Provider is implemented (storing user-groups membeship)
            * user1 is in group1
            * process1 has {{camunda:candidateStarterGroups="group1"}}
            * I query for process definition with {{startebleBy=user1}}

            Expected result:
            process1 is returned

            Current result:
            process1 is not returned

            Hint:
            when executing the query we directly join with {{ACT_ID_MEMBERSHIP}} DB table instead of taking user-group membership from identity provider. See [this line|https://github.com/camunda/camunda-bpm-platform/blob/c57c013e65bdf0d8b0149a10ec2f2ccba22ed572/engine/src/main/resources/org/camunda/bpm/engine/impl/mapping/entity/ProcessDefinition.xml#L292].

            Reported on forum: https://forum.camunda.org/t/startableby-issue-when-canidate-starter-groups-is-set/8549
            Thorben Lindhauer made changes -
            Workflow Original: camunda BPM [ 52197 ] New: Backup_camunda BPM [ 56534 ]
            Yana Vasileva made changes -
            Description Original: Steps to reproduce:
            * custom Identity Provider is implemented (storing user-groups membeship)
            * user1 is in group1
            * process1 has {{camunda:candidateStarterGroups="group1"}}
            * I query for process definition with {{startebleBy=user1}}

            Expected result:
            process1 is returned

            Current result:
            process1 is not returned

            Hint:
            when executing the query we directly join with {{ACT_ID_MEMBERSHIP}} DB table instead of taking user-group membership from identity provider. See [this line|https://github.com/camunda/camunda-bpm-platform/blob/c57c013e65bdf0d8b0149a10ec2f2ccba22ed572/engine/src/main/resources/org/camunda/bpm/engine/impl/mapping/entity/ProcessDefinition.xml#L292].

            Reported on forum: https://forum.camunda.org/t/startableby-issue-when-canidate-starter-groups-is-set/8549
            New: Steps to reproduce:
            * custom Identity Provider is implemented (storing user-groups membeship)
            * user1 is in group1
            * process1 has {{camunda:candidateStarterGroups="group1"}}
            * I query for process definition with {{startebleBy=user1}}

            Expected result:
            process1 is returned

            Current result:
            process1 is not returned

            Hint:
            when executing the query we directly join with {{ACT_ID_MEMBERSHIP}} DB table instead of taking user-group membership from identity provider. See [this line|https://github.com/camunda/camunda-bpm-platform/blob/c57c013e65bdf0d8b0149a10ec2f2ccba22ed572/engine/src/main/resources/org/camunda/bpm/engine/impl/mapping/entity/ProcessDefinition.xml#L292].

            Reported on forum: https://forum.camunda.org/t/startableby-issue-when-canidate-starter-groups-is-set/8549
            and https://forum.camunda.org/t/ability-to-query-for-all-process-def-that-current-user-can-start-based-on-startable-groups-prop-on-process-def/11779
            Yana Vasileva made changes -
            Link New: This issue is related to CAM-11357 [ CAM-11357 ]
            Yana Vasileva made changes -
            Link Original: This issue is related to CAM-11357 [ CAM-11357 ]
            Yana Vasileva made changes -
            Labels New: identity-provider
            Michal Dytko made changes -
            Link New: This issue is related to SUPPORT-7408 [ SUPPORT-7408 ]
            Michal Dytko made changes -
            Mentioned Roles
            Michal Dytko made changes -
            Mentioned Groups

              miklas.boskamp Miklas Boskamp
              svetlana.dorokhova Svetlana Dorokhova
              Votes:
              2 Vote for this issue
              Watchers:
              7 Start watching this issue

                Created:
                Updated:
                Resolved: