Monday, October 23, 2017

changing System Lane User / Multiple system Lane user

In IBM BPM system tasks are used for automated work.

These system tasks are executed by system user(mostly tw_admin or other admin user). These tasks are always executed by default system lane user.

If you want to change this default system lane user or add multiple system lane user and assign different users to different swim lanes, you can do it by following below steps.

Step 1 -
Create additional authentication aliases in WebSphere Administrative Console.

Go to Security -> Global Security -> Java Authentication and Authorization Service -> J2C authentication data
Create new users there.

image



image

Step 2- Once created, add these two authentication alias names to the list of SystemLaneUsers to indicate that these users can be used as system lane users using wsadmin scrpting.




deName = "De1"

de = AdminConfig.getid("/Cell:/BPMCellConfigExtension:/BPMDeploymentEnvironment:%s/" %deName)

print AdminConfig.showAttribute(de,"SystemLaneUserAuthAliasNames")

additionalSystemLaneUserAliases = ";".join( [ 'sys1', 'sys2' ] )

AdminConfig.modify(de, [ [ "SystemLaneUserAuthAliasNames", additionalSystemLaneUserAliases ] ] )


AdminConfig.save()


Now, you can use same in your Process App. if "system" Team is assigned to your swim lane, then first user will be used to process system tasks. 
If you want any particular user to execute system tasks then follow belos.

1.)
Create a team that contains the desired system lane user as its single user.
image


2.)
Add a new lane and mark it as a System Lane.
Associate it with desired Team name.

image




Source
https://www.ibm.com/developerworks/community/blogs/d350350e-2c84-4d33-a25d-73b42c7fbb5e/entry/Multiple_system_lanes_system_users?lang=en

https://www.ibm.com/support/knowledgecenter/SSFTN5_8.5.7/com.ibm.wbpm.admin.doc/topics/adding_system_lane_users.html

















Monday, June 5, 2017

Restrict User Access to BPM Admin Portal

For IBM BPM we can restrict user access to IBM BPM Admin console using below steps. This we need to do if we want only specific users to use Process Admin console.

- go to WAS console 
- go to Applications -> Application Type -> Websphere Enterprise Applications
- go to application "IBM_BPM_ProcessAdmin_<ClusterName>"
- go to "Security role to user/group mapping"
- select twUser and map only users you want to give access.

Find current value for env variable for a snapshot in PS using DB

If you want to find current value of env variable for a snapshot in PS environment from DB, it can be used using below 2 queries.

we can also find out if the value came as default from twx file while deployment or it has been updated later.

1.) find the custom changed value after deployment which will overwrite default values.

select s.NAME as "Snap Name", v.NAME as "Env Var Name", v.VALUE, v.LAST_MODIFIED from LSW_ENV_VAR_VAL v, LSW_SNAPSHOT s  where v.SNAPSHOT_ID=s.SNAPSHOT_ID and s.NAME='<Snapshot Name>' 

2.) Find default values of env variables which was set while deploying a snapshot.

select e.NAME, e.DEFAULT_VALUE from LSW_PO_VERSIONS v, LSW_BRANCH b, LSW_SNAPSHOT s, LSW_ENV_VAR e where v.BRANCH_ID=b.BRANCH_ID and e.VERSION_ID=v.PO_VERSION_ID and s.BRANCH_ID=b.BRANCH_ID and  s.NAME='<Snapshot_Name>'

Tuesday, March 14, 2017

IBM BPM instances are in completed state but tasks are Active

Due to a program error there might be a scenario when instance is in completed state but the task is in received state.

there are 3 Ifixes you have to install to get that solved. Below are links to technote for them

https://www-01.ibm.com/support/docview.wss?uid=swg1JR53167

https://www-01.ibm.com/support/docview.wss?uid=swg1JR52533

http://www-01.ibm.com/support/docview.wss?uid=swg1JR57381