Try OpenEdge Now
skip to main content
Business Process Portal Administrator's Guide
Managing access control : Working with permissions : Business Process Server permissions
 

Business Process Server permissions

This section explains various Business Process Server permissions and scope.

Abbreviations

The abbreviations for the component options used in the Business Process Server permissions are as follows:
*bl: BP Server
*pt: Process Template
*pi: Process Instance
*ds: Dataslot

Scope of a permission

In the case of resources such as process template or process instance, the options include "Any" and the list of process templates or process instances. If you select Any while creating a permission, then the scope of that permission is across all process templates or process instances; whereas if you select a particular process template or process instance, then the scope of that permission is limited only to the selected process template or process instance. For example, the permission bl_pt_any_any allows you to view or update any of the existing process templates, but bl_pt_any_<specific_pt> allows you to view or update only the selected process template. The following table lists only the permissions with "Any" option, wherever applicable, you may select a specific entity instead of Any to limit the scope.
Note: If ACL needs to be checked when accessing process instance resources, then system.pi.checkacl parameter in umacl.conf file should be set to true.
Table 54. Business Process Server permissions and their usage
Permission
Pre-requisite
Example
bl_pt_any_any(Default ProcessTemplate permission)
Permissions: ---Business Process Portal Configuration: Management > Overview
You can update workstep instructions fromManagement > Overview > Applications > . You can update workstep instructions using PSV tabular view.
Note: You can perform any operation on Process Template.
bl_pt_view_any
Permissions: ---Business Process Portal Configuration: Management > Overview
Management > Overview > Applications. You can only view workstep instructions.
bl_pt_update_any
Permissions: ---Business Process Portal Configuration: Management > Overview
You can update workstep instructions fromManagement > Overview > Applicationspage. You can update workstep instructions using PSV tabular view.
bl_pi_any_any_any(Default ProcessInstance permission)
Case 1:Permissions: ---Business Process Portal Configuration: ---
Home > My InstancesYou can only view the workstep details of the process instance created by you, by using PSV chart.
Case 2:Permissions: Any of the following
*bl_pt_any_any, or
*bl_pt_view_any
*bl_pt_update_any
Business Process Portal Configuration: Management > Overview
Management > Overview > InstancesYou can modify the process instance’s workstep details by using PSV chart.
bl_pi_suspend_any_any1
Permissions: All of the following
*bl_pt_any_any
*bl_pi_view_any_any
*bl_ds_update_any_any_any
Business Process Portal Configuration: Management > Overview
Management > Overview > Instances > Process Status Viewer > View DataslotsYou can suspend any process instance by changing its Status from the drop-down list.
bl_pi_resume_any_any
Permissions: All of the following
*bl_pt_any_any
*bl_pi_view_any_any
*bl_ds_update_any_any_any
Business Process Portal Configuration: Management > Overview
Management > Overview > Instances > Process Status Viewer > View DataslotsYou can resume any suspended process instance by changing its Status from the drop-down list.
bl_pi_view_any_any
Case 1:Permissions: ---Portal Configuration: ---
Home > My InstancesYou can only view the workstep details of the process instance created by you, by using PSV chart.
Case 2:Permissions: Any of the following
*bl_pt_any_any
*bl_pt_view_any
*bl_pt_update_any
Business Process Portal Configuration: Management > Overview
Management > Overview > InstancesYou can only view the process instance’s workstep details by using PSV chart.
bl_pi_update_any_any
Case 1:Permissions: ---Business Process Portal Configuration: ---
Home > My InstancesYou can only view the workstep details of the process instance created by you, by using PSV chart.
Case 2:Permissions: Any of the following
*bl_pt_any_any
*bl_pt_view_any
*bl_pt_update_any
Business Process Portal Configuration: Management > Overview
Management > Overview > InstancesYou can modify the process instance’s workstep details by using PSV chart.
bl_ds_any_any_any_any(Default DataSlot permission)
Permissions: All of the following
*bl_pt_<any or view or update>_any
*bl_pi_<any or view or update>_any_any
Business Process Portal Configuration: Management > Overview
Management > Overview > Instances > Process Status Viewer > View DataslotsYou can modify the dataslot values.
bl_ds_view_any_any_any
Note: This Permission is not supported for Global Dataslots.
Permissions: All of the following
*bl_pt_<view>_any
*bl_pi_< view>_any_any
Business Process Portal Configuration: Management > Overview
Management > Overview > Instances > Process Status Viewer > View DataslotsYou can only view the dataslot values.
bl_ds_update_any_any_any
Note: This Permission is not supported for Global Dataslots.
Permissions: All of the following
*bl_pt_<any or update>_any
*bl_pi_<any or update>_any_any
Business Process Portal Configuration: Management > Overview
Management > Overview > Instances > Process Status Viewer > View DataslotsYou can view or modify the dataslot values.
1 For these permissions, optionally, you can also specify the <creator>. For example, bl_pi_view_any_any_<creator>. In such a case, it allows you to perform the specified action on all process instances of the <creator>. Please note that, if you specify a <creator>, then such a permission ignores the specific process instance name and allows you to perform the specified action on all process instances of the <creator>. Also note that, like other fields, the <creator> field is used as a constraint or filter to limit the access.

Example
bl_ds_any_any_any_any
Let us assume that the administrator "admin" wants to grant the permission to a user "user1" to modify the dataslot values of any instance of any process. In order to do so, the user will need permission to access the process instance (bl_pi_any_any), and to access the process instance, the user needs permission to access the process template (bl_pt_any_any). Also, to access the dataslots, the user needs access to the Management > Overview menu option. The administrator grants all these permissions and access to the menu option using the User Details page.
The user can now login in Business Process Portal and go to the Instances Overview page.
On this page he/she can click the Process Status Viewer icon in the Chart column to open the Process Status Viewer page. Click View Dataslots to open the View Dataslot page. As the user "user1" has permission to perform any operation on the dataslots, he/she can modify the values of any dataslots.