Package org.flowable.ui.task.service.runtime

Class PermissionService

java.lang.Object

org.flowable.ui.task.service.runtime.PermissionService

@Service
@Transactional
public class PermissionService
extends Object

Centralized service for all permission-checks.

Author:

Frederik Heremans

Field Summary

Fields

Modifier and Type	Field	Description
protected org.flowable.cmmn.api.CmmnHistoryService	cmmnHistoryService
protected HistoryService	historyService
protected RepositoryService	repositoryService
protected RuntimeService	runtimeService
protected TaskService	taskService

Constructor Summary

Constructors

Constructor	Description
PermissionService()

Method Summary

Modifier and Type	Method	Description
boolean	canAddRelatedContentToCase(SecurityScope user, String caseId)
boolean	canAddRelatedContentToProcessInstance(SecurityScope user, String processInstanceId)
boolean	canAddRelatedContentToTask(SecurityScope user, String taskId)
boolean	canDeleteProcessInstance(SecurityScope currentUser, HistoricProcessInstance processInstance)
boolean	canDownloadContent(SecurityScope currentUserObject, ContentItem content)
boolean	canStartProcess(SecurityScope user, ProcessDefinition definition)
protected List<String>	getPotentialStarterGroupIds(List<org.flowable.identitylink.api.IdentityLink> identityLinks)
protected List<String>	getPotentialStarterUserIds(List<org.flowable.identitylink.api.IdentityLink> identityLinks)
boolean	hasReadPermissionOnCase(SecurityScope user, String caseId)	Check if the given user is allowed to read the Case.
boolean	hasReadPermissionOnCaseInstance(SecurityScope user, org.flowable.cmmn.api.history.HistoricCaseInstance historicCaseInstance, String caseInstanceId)	Check if the given user is allowed to read the process instance.
boolean	hasReadPermissionOnProcessInstance(SecurityScope user, String processInstanceId)	Check if the given user is allowed to read the process instance.
boolean	hasReadPermissionOnProcessInstance(SecurityScope user, HistoricProcessInstance historicProcessInstance, String processInstanceId)	Check if the given user is allowed to read the process instance.
boolean	hasWritePermissionOnRelatedContent(SecurityScope user, ContentItem content)
boolean	isInvolved(SecurityScope user, String taskId)
boolean	isTaskOwnerOrAssignee(SecurityScope user, String taskId)
boolean	isTaskOwnerOrAssignee(SecurityScope user, org.flowable.task.api.Task task)
boolean	validateIfUserIsInitiatorAndCanCompleteTask(SecurityScope user, org.flowable.task.api.Task task)
org.flowable.task.api.history.HistoricTaskInstance	validateReadPermissionOnTask(SecurityScope user, String taskId)	Check if the given user is allowed to read the task.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

taskService

@Autowired
protected TaskService taskService

runtimeService

@Autowired
protected RuntimeService runtimeService

repositoryService

@Autowired
protected RepositoryService repositoryService

historyService

@Autowired
protected HistoryService historyService

cmmnHistoryService

@Autowired
protected org.flowable.cmmn.api.CmmnHistoryService cmmnHistoryService

Constructor Detail

PermissionService

public PermissionService()

Method Detail

validateReadPermissionOnTask

public org.flowable.task.api.history.HistoricTaskInstance validateReadPermissionOnTask(SecurityScope user,
                                                                                       String taskId)

Check if the given user is allowed to read the task.

isTaskOwnerOrAssignee

public boolean isTaskOwnerOrAssignee(SecurityScope user,
                                     String taskId)

isTaskOwnerOrAssignee

public boolean isTaskOwnerOrAssignee(SecurityScope user,
                                     org.flowable.task.api.Task task)

validateIfUserIsInitiatorAndCanCompleteTask

public boolean validateIfUserIsInitiatorAndCanCompleteTask(SecurityScope user,
                                                           org.flowable.task.api.Task task)

isInvolved

public boolean isInvolved(SecurityScope user,
                          String taskId)

hasReadPermissionOnProcessInstance

public boolean hasReadPermissionOnProcessInstance(SecurityScope user,
                                                  String processInstanceId)

Check if the given user is allowed to read the process instance.

hasReadPermissionOnCase

public boolean hasReadPermissionOnCase(SecurityScope user,
                                       String caseId)

Check if the given user is allowed to read the Case.

hasReadPermissionOnProcessInstance

public boolean hasReadPermissionOnProcessInstance(SecurityScope user,
                                                  HistoricProcessInstance historicProcessInstance,
                                                  String processInstanceId)

Check if the given user is allowed to read the process instance.

hasReadPermissionOnCaseInstance

public boolean hasReadPermissionOnCaseInstance(SecurityScope user,
                                               org.flowable.cmmn.api.history.HistoricCaseInstance historicCaseInstance,
                                               String caseInstanceId)

Check if the given user is allowed to read the process instance.

canAddRelatedContentToTask

public boolean canAddRelatedContentToTask(SecurityScope user,
                                          String taskId)

canAddRelatedContentToProcessInstance

public boolean canAddRelatedContentToProcessInstance(SecurityScope user,
                                                     String processInstanceId)

canAddRelatedContentToCase

public boolean canAddRelatedContentToCase(SecurityScope user,
                                          String caseId)

canDownloadContent

public boolean canDownloadContent(SecurityScope currentUserObject,
                                  ContentItem content)

hasWritePermissionOnRelatedContent

public boolean hasWritePermissionOnRelatedContent(SecurityScope user,
                                                  ContentItem content)

canDeleteProcessInstance

public boolean canDeleteProcessInstance(SecurityScope currentUser,
                                        HistoricProcessInstance processInstance)

canStartProcess

public boolean canStartProcess(SecurityScope user,
                               ProcessDefinition definition)

getPotentialStarterGroupIds

protected List<String> getPotentialStarterGroupIds(List<org.flowable.identitylink.api.IdentityLink> identityLinks)

getPotentialStarterUserIds

protected List<String> getPotentialStarterUserIds(List<org.flowable.identitylink.api.IdentityLink> identityLinks)