Uploaded image for project: 'jBPM'
  1. jBPM
  2. JBPM-5441

When a timer is triggered the user unknown does not have permission to access asset which requires a specific role

    Details

    • Steps to Reproduce:
      Hide

      1) Secure a kjar for a specific group
      2) Set PPI strategy (I don't think it's necessary)
      3) Create a process definition with a human task which will notify the actor to start the tast (not-started) after 2m.
      4) Build & Deploy & Start the process & Wait to see the exception in the server log

      Show
      1) Secure a kjar for a specific group 2) Set PPI strategy (I don't think it's necessary) 3) Create a process definition with a human task which will notify the actor to start the tast (not-started) after 2m. 4) Build & Deploy & Start the process & Wait to see the exception in the server log
    • Docs QE Status:
      NEW
    • QE Status:
      NEW

      Description

      I secured kjar only for a specific group in the deployment descriptor. The project is set to PPI strategy and a human task reacts after 2m with notification (not-started) - the process is running on Process Server and I get exception "User unknown does not have permission to access this asset" when the timer for notification is triggered.

      java.lang.SecurityException: User unknown does not have permission to access this asset
      2016-12-05 14:07:14,875 ERROR [stderr] (pool-17-thread-1) at org.jbpm.kie.services.impl.security.IdentityRolesSecurityManager.checkPermission(IdentityRolesSecurityManager.java:55)
      2016-12-05 14:07:14,875 ERROR [stderr] (pool-17-thread-1) at org.jbpm.runtime.manager.impl.AbstractRuntimeManager.checkPermission(AbstractRuntimeManager.java:382)
      2016-12-05 14:07:14,875 ERROR [stderr] (pool-17-thread-1) at org.jbpm.runtime.manager.impl.PerProcessInstanceRuntimeManager.getRuntimeEngine(PerProcessInstanceRuntimeManager.java:105)
      2016-12-05 14:07:14,875 ERROR [stderr] (pool-17-thread-1) at org.jbpm.process.core.timer.impl.GlobalTimerService.getCommandService(GlobalTimerService.java:228)
      2016-12-05 14:07:14,876 ERROR [stderr] (pool-17-thread-1) at org.jbpm.process.core.timer.impl.GlobalTimerService.getCommandService(GlobalTimerService.java:203)
      2016-12-05 14:07:14,876 ERROR [stderr] (pool-17-thread-1) at org.jbpm.persistence.timer.GlobalJpaTimerJobInstance.call(GlobalJpaTimerJobInstance.java:75)
      2016-12-05 14:07:14,876 ERROR [stderr] (pool-17-thread-1) at org.jbpm.persistence.timer.GlobalJpaTimerJobInstance.call(GlobalJpaTimerJobInstance.java:47)
      2016-12-05 14:07:14,876 ERROR [stderr] (pool-17-thread-1) at java.util.concurrent.FutureTask.run(FutureTask.java:266)
      2016-12-05 14:07:14,876 ERROR [stderr] (pool-17-thread-1) at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.access$201(ScheduledThreadPoolExecutor.java:180)
      2016-12-05 14:07:14,876 ERROR [stderr] (pool-17-thread-1) at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:293)
      2016-12-05 14:07:14,876 ERROR [stderr] (pool-17-thread-1) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
      2016-12-05 14:07:14,876 ERROR [stderr] (pool-17-thread-1) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
      2016-12-05 14:07:14,876 ERROR [stderr] (pool-17-thread-1) at java.lang.Thread.run(Thread.java:745)

        Gliffy Diagrams

          Attachments

            Activity

              People

              • Assignee:
                swiderski.maciej Maciej Swiderski
                Reporter:
                ibek Ivo Bek
              • Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: