Need help in claiming the task

[sandeep.gollapudi]

Hi All,

Hope you are doing good.

Am using jbmp6.2 remote api and Tomcat7. I was removed basic authentication.

My requirement is from external system i have to trigger all the jbpm human task operations.

Am able to start the process with out any issues after removing the basic authentication using the following url : http://localhost:8080/jbpm-console/rest/runtime/{deploymentId}/process/{processDefId}/start

But when am trying to claim the task or completing the task am getting following error:

For to Start a task: http://localhost:8080/jbpm-console/rest/task/1487/start

Error:

<?xml version="1.0" encoding="UTF-8" standalone="yes"?>

<exception>

    <status>FAILURE</status>

    <url>http://localhost:8080/jbpm-console/rest/task/1487/start</url>

    <message>PermissionDeniedException thrown with message 'User '[UserImpl:'unknown']' does not have permissions to execute operation 'Start' on task id 1487'</message>

    <stackTrace>org.kie.remote.services.rest.exception.KieRemoteRestOperationException: User '[UserImpl:'unknown']' does not have permissions to execute operation 'Start' on task id 1487

I understood that it use the user (id) used in the REST basic authorization as input for the user parameter in the specific call . But i have removed the basic authentication since external system only provides username in the url. Apart from the username i don't have any other info.

Please suggest me is there any good approach i can follow to use the Remote API if it triggers from any external system.

Thanks In Advance,

Sandeep Gollapudi

[abhijithumbe]

Hi,

You are facing this issue because you have disabled authentication for /rest end point. If you check source code you will see the action performed through REST API are done with the user that authenticated the REST call

~~~

@POST

    @Path("/{taskId: [0-9-]+}/{oper: [a-zA-Z]+}")

    public Response taskId_oper(@PathParam("taskId") long taskId, @PathParam("oper") String operation) {

        Map<String, List<String>> params = getRequestParams(uriInfo);

        operation = checkThatOperationExists(operation, allowedOperations);   

        String userId = identityProvider.getName();

        logger.debug("Executing " + operation + " on task " + taskId + " by user " + userId );

~~~~

To work with REST API you have to enable authentication of /rest endpoint. If you use RemoteREST API it can solve your issue, here we can use different user for authentication and another for task operation, like as:

~~~~

RuntimeEngine engine = RemoteRuntimeEngineFactory.newRestBuilder().addUrl(url).addUserName(userName).addPassword(passWord)

        .addDeploymentId(deploymentId).build();

TaskService taskService = engine.getTaskService();

taskService.start(1, "abhi");

taskService.complete(1, "abhi", null);

~~~~

Hope it helps..

[sandeep.gollapudi]

Very useful. Thanks you soo much Abhijit Humbe .

Regards,
Sandeep Gollapudi