Answers to: Active ivy role

Comment by nguyenbkcse on Flavio Sadeghi's answer

nguyenbkcse — Wed, 12 Jul 2017 06:48:16 -0400

Dear @Flavio Sadeghi, I got your idea, thank you

Answer by Flavio Sadeghi

Flavio Sadeghi — Wed, 12 Jul 2017 05:51:42 -0400

Dear @nguyenbkcse

As @trungdv has pointed out:

The method SecurityContext.getRoles() returns all roles of the current running application. Whether the roles are still used or not.
The method SecurityContext.getActiveRoles() returns all roles which are still defined in a active PMV (active = release state of the pmv is released or deprecated). Roles created by API will not be defined in a PMV (in a Project/roles.roleconfig file). Therefore they are not listed as active roles. The naming 'active' may lead to confusion. Basically the idea was to filter roles, which are no longer defined in project, since they are no longer used in a current running process and only exists to tracking workflow history...

Comment by nguyenbkcse on nguyenbkcse's question

nguyenbkcse — Mon, 10 Jul 2017 23:49:13 -0400

Dear @trungdv, I don't call this api, I used AdminUI, and to show the default role list (without checking the checkbox "Display obsolete Roles"), I saw the source code call getActiveRoles(). Of course, the new roles I created are not in that list so I can't see the role in default list (you can see only if you check the checkbox) If you have AdminUI source code and investigate the code, you can see what I mentioned

Comment by trungdv on nguyenbkcse's question

trungdv — Mon, 10 Jul 2017 23:30:18 -0400

hi @nguyenbkcse

Can i ask you reason why you need to call this api? why it's not SecurityContext().getRoles()/getAllRoles().

IMO, Active role somehow is handle by ivy system. One mention about that api here:

 In comparison to ISecurityContext.getRoles() those roles will be excluded, which only exists in 
outdated Process Model Versions.

We should use it with care