Technical user - access bdm data on behalf of a user

Submitted by enrico.curiotto on Mon, 06/14/2021 - 17:36
1
0
-1

Hello,

I use a "technical" user to connect to the Bonita engine with the rest api.

We created this user in our LDAP and in the Bonita organization.

I need to access BDM resources on behalf of different "real" users, getting filtered attributes through the bdm access control.

The response should be different according to the user selected.

How can I do that?

Thanks!

1 answer

Submitted by Pablo Alonso de... on Wed, 06/23/2021 - 17:32
1
0
-1

Hi Enrico,

There is no native functionality that allows to change permissions on BDM objects based to act on behalf, but it should not be complex to add this behaviour with Bonita extension points.

As BDM Access Control is based on Profiles you could build an application (page + Rest APi extension) that let the "technical user" choose a "regular user", with that user call the rest API extension that will:

Ideally add a button to reset a Remove all "technical user" profiles (except the one mapped to the current application) to keep it clean.

I hope it helps

Notifications