Joget Workflow v6

Participant Mapping &

Permission Control

http://facebook.com/jogetworkflow
http://twitter.com/jogetworkflow
Last Revised on Oct 2018
All Rights Reserved © Joget Inc
 Prerequisites
• General understanding of all major Joget components
(i.e. Process, Form, List and Userview)

All Rights Reserved © Joget Inc

 Content
1. Participant Mapping
2. Application Permission Control

All Rights Reserved © Joget Inc

 Chapter 1
Participant Mapping

All Rights Reserved © Joget Inc

 Participant Mapping
• User Mapping Categories
– Map to User or Group
– Map to Org Chart
– Map to Workflow Variable
– Map to Plugin

All Rights Reserved © Joget Inc

 Plugin Types

All Rights Reserved © Joget Inc

 Where to map participants?

ALL participants
must be mapped,
except “System”

All Rights Reserved © Joget Inc

 Workflow Participant Mapping
Let’s assume that, applicant’s HOD is responsible to approve
any purchase requests made by the applicant.

All users

Applicant’s HOD

All Rights Reserved © Joget Inc

 Approver: Performer’s HOD

Approver is Performer’s HOD where the

performer executed Previous Activity
All Rights Reserved © Joget Inc
 Workflow Participant Mapping

All Rights Reserved © Joget Inc

 Publish the App
• With the Participant Mapping performed, we are now
ready to Publish the App for end users to use / continue
testing.
• The app MUST be published first before end users can
access it.

• If you haven’t publish your app yet, refresh your memory

on how to by referring to Module 8 - designing Userview.

All Rights Reserved © Joget Inc

 Login as cat/password
• Open up Purchase Requisition Portal.

All Rights Reserved © Joget Inc

 Test Run the Workflow Process
• With the participant mapping set, run the process again
as the user “cat”, through the Purchase Requisition
Portal.

All Rights Reserved © Joget Inc

 Who is Cat Grant’s HOD?
First name is the
username, and password
is password.
e.g: clark/password

Note: This is the sample organization chart provided upon initial installation, for
your testing convenience. The 3 users: cat, clark, and admin, is free by default.

All Rights Reserved © Joget Inc

 Exercise 1
• Refresh what you have learned in the previous modules.
Check on who is assigned the approver’s task without
explicitly logging into Clark’s account to check.

All Rights Reserved © Joget Inc

 Important Notes
• All participants MUST be mapped.
• Do NOT choose activity from the same swimlane as the
participant that is being mapped unless it is intended so.
• Choose only activity that has been completed.
• If NO user is found, it will be defaulted to the last
performer. (Possibly, the current logged in user who had
just completed the prior activity OR the process requester)
• If mapped to an inactive user, do delegate, re-assign, or
change mapping and re-evaluate the assignment.

All Rights Reserved © Joget Inc

 Chapter 1 Review
We have learnt to:
1. Understand various Participant Mapping options
available.
2. Understand the important rules in Participant Mapping.
3. Able to relate and manage participant mapping with the
administrative process monitoring module.

All Rights Reserved © Joget Inc

 Chapter 2
Application Permission
Control

All Rights Reserved © Joget Inc

 Introduction
• Permission Control is used to exert control and manage
access to various components in a developed Joget App.

All Rights Reserved © Joget Inc

 Reviewing various components with
potential access control
• How would a user access the app?
• What can a user do after accessing the app?
• List down what the user can explicitly do within the app.

User

All Rights Reserved © Joget Inc

 3 Categories
• Process
• Form
• Userview

All Rights Reserved © Joget Inc

 5 Permission Layers
• Process
– Process Start Whitelist
• Form
– Form
– Form Section
• Userview
– Userview
– Userview Category

All Rights Reserved © Joget Inc

 Process Start Whitelist
• Controls on who can start/run the Process.
• Available in each Process

By default, this whitelist is set to admin role only, for safety purposes.
Remember to map a participant / role before publishing to production.

All Rights Reserved © Joget Inc

 Form
• Controls on who can see the Form.

All Rights Reserved © Joget Inc

 Form Section
• Controls on who can see the Form Section.

All Rights Reserved © Joget Inc

 Userview
• Controls on who can access the Userview.

All Rights Reserved © Joget Inc

 Userview Category
• Controls on who can see the Userview Category.

All Rights Reserved © Joget Inc

 Typical Permission Control
Precedence
1. Userview (top)
2. Userview Category
3. Process Start Whitelist
4. Form
5. Form Section

All Rights Reserved © Joget Inc

 Discussion
• With permission control available at the Form level and
Form section level, why don’t we have Form Field level
permission control?

All Rights Reserved © Joget Inc

 Exercise 1
• Modify your App in such a way that:-
– Anonymous user will not be able to see anything except for the
landing page “Home”.
– Only users from the “Managers” group can see the “List All”
menu item.

Tip: A group may / may not belong to an organization.

All Rights Reserved © Joget Inc

 Discussion
• What would you want anonymous users to see when they
visit the App Center?
Should all the apps be made secure at the first place?

All Rights Reserved © Joget Inc

 More…
• Visit...
http://dev.joget.org/community/display/KBv6/Permission+Control
...for
list of permission plugins and up-to-date
documentation.

32
All Rights Reserved © Joget Inc
 Module Review
1. Participant Mapping
2. Application Permission Control

All Rights Reserved © Joget Inc

 Stay Connected with Joget Workflow

• www.joget.org
• community.joget.org
• twitter.com/jogetworkflow
• facebook.com/jogetworkflow
• youtube.com/jogetworkflow

All Rights Reserved © Joget Inc