How to modify jbpm-console to make it retrieve user and role list from database?

[thomas.setiabudi]

Hi,

The jbpm-console that comes with JBPM5.3 installer reads a set of user and roles from textfiles,

How do we modify the jbpm-console to retrieve the user and role list from database?

Regards,

Thomas Setiabudi

[kifayath]

Hi Thomas

I am also looking for same information.

regards

kaif

[swiderski.maciej]

You need to configure security domain in JBoss Application Server that is used by jbpm-console. To do so, go to standalone.xml and modify section for jbpm-console security domain, for more details about configuring data base realms check JBoss AS documentation.

HTH

[thomas.setiabudi]

Hi Maciej Swiderski,

Thanks for pointing that.

I changed the security domain in standalone.xml

then when I want to logs in, I got this message from jbpm console
"You are not authorized to use this application"

(I attached the screenshot)

How do I get my Database User and Roles authorized to login into jbpm-console?

Any help is appreciated.

Regards,

Thomas Setiabudi

[swiderski.maciej]

you need to add one of following roles into your users to be able to access console:

- user

- admin

- manager

Only those roles are allowed to access console.

HTH

[thomas.setiabudi]

wow thats real quick answer!

Thank you very much, I can log in with my Database user now.

by the way, where are those authorized roles: user, admin, and manager is defined?

[thomas.setiabudi]

Just in case someone need to do the same thing, here are some technical detail on how to make jbpm-console get list of user and roles from database.

My Environment:

1. JBPM5.3 default installer

2. Changed the DB to SQL Server https://community.jboss.org/wiki/SetUpJBPM53ToUseMSSQLServer2008

3. change the security-domain of jbpm-console in JBoss AS 7's standalone.xml    

Reference: http://docs.jboss.org/jbosssecurity/docs/6.0/security_guide/html/Login_Modules.html#sect-DatabaseServerLoginModule

if my database tables are:

dbo.User(UserLogon VARCHAR(64) PRIMARY KEY, Password VARCHAR(64))

dbo.UserRole (UserLogon VARCHAR(64), RoleName VARCHAR(32))

in standalone.xml look for this section:                  

 <security-domain name="jbpm-console" cache-type="default">
                    <authentication>
                        <login-module code="UsersRoles" flag="required">
                            <module-option name="usersProperties" value="${jboss.server.config.dir}/users.properties"/>
                            <module-option name="rolesProperties" value="${jboss.server.config.dir}/roles.properties"/>
                        </login-module>
                    </authentication>
                </security-domain>

and change it to:

<security-domain name="jbpm-console" cache-type="default">
                    <authentication>
                        <login-module code="org.jboss.security.auth.spi.DatabaseServerLoginModule" flag="required">
                            <module-option name="dsJndiName" value="java:jboss/datasources/jbpmDS"/>
                            <module-option name="principalsQuery" value="select Password from dbo.User where UserLogon=?"/>
                            <module-option name="rolesQuery" value="select RoleName, 'Roles' from dbo.UserRole where UserLogon=?"/>
                        </login-module>
                    </authentication>
                </security-domain>

Hope it can be useful

[yogesh02]

Hi Thomas,

I followed the same as you mentioned above but still getting the "Authentication Failed" on jbpm console.

I'm using jbpm5.4 with oracle database.

Please help!!

Thanks in advance.

[thomas.setiabudi]

Hi Yogesh Gupta?

what is your current configuration?

[yogesh02]

Hi Thomas,

I'm using jbpm5.4 with oracle 11g.

My requirement is- I want to retrieve the users from database.

Thanks in advance....

[kannan123]

Hi

I can login with my database user but cannot assign task to the user. From many post i understood that want to register the custom UserGroupCallBack. How can i do this. I am using jbpm 5.4.

Regards

Kannan

[arulbrave]

Thanks Thomas Setiabudi.. This post Realy helped me a lot.....!

[abhijitkumar1903]

Can you please help me with this JBPM6.2 to retrieve Users and Role from Mysql DB