3.15 Add Reviewers Dialog

Use to assign a user, group, or application role as reviewers in the workflow.

Element Description

Add icon

Click to assign a user, group, or application role to participate in this task.

Users who are members of the specified group or application role are assigned this task. For a user to act on a task assigned to a group or an application role, they must first claim the task in Oracle BPM Worklist during runtime. This enables a task to be assigned to a user who is, for example, passed the payload of a BPEL process or computed in a prior activity of a BPEL process.

Application roles consist of users or other roles grouped logically for application-level authorizations. These roles are application-specific and are defined in the application Java policy store rather than the identity store. These roles are used by the application directly and are not necessarily known to a Java EE container.

Application roles define policy. Java permissions can be granted to application roles. Therefore, application roles define a set of permissions granted to them directly or indirectly through other roles (if a role is granted to a role). The policy can contain grants of application roles to enterprise groups or users. In the jazn-data.xml file of the file-based policy store, these roles are defined in <app-role> elements under <policy-store> and written to system-jazn-data.xml at the farm level during deployment. You can also define these roles after deployment using Oracle Enterprise Manager Fusion Middleware Control Console. You can set a task owner or approver to an application role at design time if the role has been previously deployed.

Identification Type column

Displays your selection of user, group, or application role. To change your selection, click in this column to invoke a dropdown list.

Data Type column

Click your selection to invoke a dropdown list to assign a value:

  • By Name: If your identification type is a user or group, click the Browse icon on the right to display a dialog for selecting a user or group configured through the identity service. The identity service enables the lookup of user properties, roles, and group memberships. User information is obtained from an LDAP server such as Oracle Internet Directory. You can use wild cards (*) to search for IDs.

    If your selection is an application role, click the Browse icon to display a dialog for selecting an application role. To search for application roles, you must first create a connection to the application server. When searching, you must specify the application name in order to find the name of the role. Note that the task definition can refer to only one application name. You cannot use application roles from different applications as assignees or task owners.

  • By Expression: For user, group, or application role, click the Browse icon to dynamically select a task assignee in the Expression Builder dialog. Use the bpws:getVariableData(...) expression or the ids:getManager() XPath function.

Value column

Displays the value you specified with the Browse icon in the Data Type column. You can also manually enter a value in this field.

Related Topics

Creating Human Tasks in Developing SOA Applications with Oracle SOA Suite