Chapter 11. Case management security

Procedure

1. Open JBOSS_HOME/standalone/deployments/kie-server.war/WEB-INF/classes/case-authorization.properties file in your preferred editor.

   By default, the file contains the following operation restrictions:

   CLOSE_CASE=owner,admin
   CANCEL_CASE=owner,admin
   DESTROY_CASE=owner,admin
   REOPEN_CASE=owner,admin

   Copy to Clipboard Toggle word wrap

2. You can add or remove role permissions for these operations.

   1. To remove permission for a role to perform an operation, remove it from the list of authorized roles for that operation in the case-authorization.properties file. For example, removing the admin role from the CLOSE_CASE operation restricts permission to close a case to the case owner for all cases.

   2. To give a role permission to perform a case operation, add it to the list of authorized roles for that operation in the case-authorization.properties file. For example, to allow anyone with the manager role to perform a CLOSE_CASE operation, add it to the list of roles, separated by a comma:

      CLOSE_CASE=owner,admin,manager

3. To add role restrictions to other case operations listed in the file, remove the # from the line and list the role names in the following format:

   OPERATION=role1,role2,roleN

   Operations in the file that begin with # have restrictions ignored and can be performed by anyone involved in the case.

4. When you have finished assigning role permissions, save and close the case-authorization.properties file.

5. Start the execution server.

   The case authorization settings apply to all cases on the execution server.