Can I use a generic user (i.e: install) to call to loginservice instead of a user linked to a person?

Q&A
1

Hi experts,

We’re trying to implement Bonita BPM Community 7, but using a different custom front-end web.

I’ve made some tests of using REST Api but it needs a previous login.

My question is if it’s fine to use a generic user/password to call to loginservice, instead of the user who is owner of the task or need to check his pending work.

Is it ok to use user “install”?

Thanks in advance,
Jose.

2

My question is if it’s fine to use a generic user/password to call to loginservice

Yes, perfectly acceptable to use a “generic” user to call loginService.

You don’t give the reason you don’t want to use a predefined UID of your own though so it’s hard to say.

For example:

Install the product
login with install
create mySpecialLoginUser (as admin by the way)

create my REST loginService calls using mySpecialLoginUser

Done and no need to use install

regards
Seán

PS: If this reply answers your question, please mark as resolved.

3

Thanks Sean!

So then I should pass the desired user_id to the services, to act in behalf of the connected user to the front end?

The reason is, even if assuming user/pwd are the same both in our front end and Bonita, we should have to save the user password somewhere just when user do the login in the front end, in order to resend it to Bonita when calling the REST API.

If I’m wrong, please suggest me another solution.

Regards!
Jose.