Process Security Functions

Overview

Process Security Functions provides a set of functions that determine values of various user role maps (such as Administrators, Editors, Managers, Viewers, Initiators, and Explicit Non-Viewers) for a process instance.  An individual function is provided for each process security role  map as follows:

• getProcessAdministrators(processId): Retrieves the user or groups who have administrative permissions
• getProcessManagers(processId): Retrieves the user or groups who have manager permissions
• getProcessViewers(processId): Retrieves the user or groups who have viewer permissions
• getProcessInitiators(processId): Retrieves the user or groups who have initiator permissions
• getProcessExplicitNonViewers(processId): Retrieves the user or groups who have deny permissions
• getProcessEditors(processId): Retrieves the user or groups who have editor permissions

The Plug-in uses a default service context injected into the function definition maintaining data integrity and security of the process instance.  When the functions are executed by the user who started the process, the functions determine what rights that user has on that process instance and return results appropriately. If the user does not have appropriate rights on a process instance, results will be null.