Add authorization directly to database

[sgag...@gmail.com]

Hi,

I am writing sql script for adding groups and authorization. Currently I am able to generate groups and add them to database, but I cannot find tables that I need to access in order to add authorization part. What I am trying to do is:
1. Set the authorization for the created group
2. Set permissions on process definitions
3. Set permissions on process instances
4. Create filter with group permissions

How can I achieve this directly through sql, instead of using JAVA API?

[Philipp Ossler]

Hi Sanja,

the database table for authorization is ACT_RU_AUTHORIZATION. Add a new row at the table to create a new authorization. The easiest way to get the specific SQL (e.g. set authorization for creating groups) is to use the Java or the REST API [1] and see the result in the database. Please refer to the docs [2] for details about the authorization. Note that the table use constants for resources [3], permissions [4] and the authorization type [5].

Greetings,

Philipp

[1] https://docs.camunda.org/manual/latest/reference/rest/authorization/ 

[2] https://docs.camunda.org/manual/latest/user-guide/process-engine/authorization-service/

[3] https://github.com/camunda/camunda-bpm-platform/blob/master/engine/src/main/java/org/camunda/bpm/engine/authorization/Resources.java

[4] https://github.com/camunda/camunda-bpm-platform/blob/master/engine/src/main/java/org/camunda/bpm/engine/authorization/Permissions.java

[5] https://github.com/camunda/camunda-bpm-platform/blob/master/engine/src/main/java/org/camunda/bpm/engine/authorization/Authorization.java