How to use

addPermissionCheck

method

in

org.camunda.bpm.engine.impl.persistence.entity.AuthorizationManager

public void configureIncidentQuery(IncidentQueryImpl query) {
 configureQuery(query);
 addPermissionCheck(query, PROCESS_INSTANCE, "RES.PROC_INST_ID_", READ);
 addPermissionCheck(query, PROCESS_DEFINITION, "PROCDEF.KEY_", READ_INSTANCE);
}

public void configureJobQuery(JobQueryImpl query) {
 configureQuery(query);
 addPermissionCheck(query, PROCESS_INSTANCE, "RES.PROCESS_INSTANCE_ID_", READ);
 addPermissionCheck(query, PROCESS_DEFINITION, "RES.PROCESS_DEF_KEY_", READ_INSTANCE);
}

public void configureExecutionQuery(AbstractQuery query) {
 configureQuery(query);
 addPermissionCheck(query, PROCESS_INSTANCE, "RES.PROC_INST_ID_", READ);
 addPermissionCheck(query, PROCESS_DEFINITION, "P.KEY_", READ_INSTANCE);
}

public void configureEventSubscriptionQuery(EventSubscriptionQueryImpl query) {
 configureQuery(query);
 addPermissionCheck(query, PROCESS_INSTANCE, "RES.PROC_INST_ID_", READ);
 addPermissionCheck(query, PROCESS_DEFINITION, "PROCDEF.KEY_", READ_INSTANCE);
}

public void configureExternalTaskQuery(ExternalTaskQueryImpl query) {
 configureQuery(query);
 addPermissionCheck(query, PROCESS_INSTANCE, "RES.PROC_INST_ID_", READ);
 addPermissionCheck(query, PROCESS_DEFINITION, "RES.PROC_DEF_KEY_", READ_INSTANCE);
}

public void configureExecutionQuery(AbstractQuery query) {
 configureQuery(query);
 addPermissionCheck(query, PROCESS_INSTANCE, "RES.PROC_INST_ID_", READ);
 addPermissionCheck(query, PROCESS_DEFINITION, "P.KEY_", READ_INSTANCE);
}

public void configureEventSubscriptionQuery(EventSubscriptionQueryImpl query) {
 configureQuery(query);
 addPermissionCheck(query, PROCESS_INSTANCE, "RES.PROC_INST_ID_", READ);
 addPermissionCheck(query, PROCESS_DEFINITION, "PROCDEF.KEY_", READ_INSTANCE);
}

public void configureIncidentQuery(IncidentQueryImpl query) {
 configureQuery(query);
 addPermissionCheck(query, PROCESS_INSTANCE, "RES.PROC_INST_ID_", READ);
 addPermissionCheck(query, PROCESS_DEFINITION, "PROCDEF.KEY_", READ_INSTANCE);
}

public void configureJobQuery(JobQueryImpl query) {
 configureQuery(query);
 addPermissionCheck(query, PROCESS_INSTANCE, "RES.PROCESS_INSTANCE_ID_", READ);
 addPermissionCheck(query, PROCESS_DEFINITION, "RES.PROCESS_DEF_KEY_", READ_INSTANCE);
}

public void configureExternalTaskQuery(ExternalTaskQueryImpl query) {
 configureQuery(query);
 addPermissionCheck(query, PROCESS_INSTANCE, "RES.PROC_INST_ID_", READ);
 addPermissionCheck(query, PROCESS_DEFINITION, "RES.PROC_DEF_KEY_", READ_INSTANCE);
}

public void configureBatchStatisticsQuery(BatchStatisticsQueryImpl query) {
 configureQuery(query);
 addPermissionCheck(query, BATCH, "RES.ID_", READ);
}

public void configureBatchQuery(BatchQueryImpl query) {
 configureQuery(query);
 addPermissionCheck(query, BATCH, "RES.ID_", READ);
}

public void configureBatchQuery(BatchQueryImpl query) {
 configureQuery(query);
 addPermissionCheck(query, BATCH, "RES.ID_", READ);
}

public void configureBatchStatisticsQuery(BatchStatisticsQueryImpl query) {
 configureQuery(query);
 addPermissionCheck(query, BATCH, "RES.ID_", READ);
}

public void configureQuery(AbstractQuery query, Resource resource, String queryParam, Permission permission) {
 configureQuery(query);
 addPermissionCheck(query, resource, queryParam, permission);
}

public void configureConditionalEventSubscriptionQuery(ListQueryParameterObject query) {
 configureQuery(query);
 addPermissionCheck(query, PROCESS_DEFINITION, "P.KEY_", READ);
}

public void configureQuery(AbstractQuery query, Resource resource, String queryParam, Permission permission) {
 configureQuery(query);
 addPermissionCheck(query, resource, queryParam, permission);
}

public void configureTaskQuery(TaskQueryImpl query) {
 configureQuery(query);
 if(query.getAuthCheck().isAuthorizationCheckEnabled()) {
  // necessary authorization check when the task is part of
  // a running process instance
  CompositePermissionCheck permissionCheck = new PermissionCheckBuilder()
      .disjunctive()
      .atomicCheck(TASK, "RES.ID_", READ)
      .atomicCheck(PROCESS_DEFINITION, "PROCDEF.KEY_", READ_TASK)
      .build();
   addPermissionCheck(query.getAuthCheck(), permissionCheck);
 }
}

protected void configureVariableInstanceQuery(VariableInstanceQueryImpl query) {
 configureQuery(query);
 if(query.getAuthCheck().isAuthorizationCheckEnabled()) {
  CompositePermissionCheck permissionCheck = new PermissionCheckBuilder()
      .disjunctive()
      .atomicCheck(PROCESS_INSTANCE, "RES.PROC_INST_ID_", READ)
      .atomicCheck(PROCESS_DEFINITION, "PROCDEF.KEY_", READ_INSTANCE)
      .atomicCheck(TASK, "RES.TASK_ID_", READ)
      .build();
   addPermissionCheck(query.getAuthCheck(), permissionCheck);
 }
}

protected void configureVariableInstanceQuery(VariableInstanceQueryImpl query) {
 configureQuery(query);
 if(query.getAuthCheck().isAuthorizationCheckEnabled()) {
  CompositePermissionCheck permissionCheck = new PermissionCheckBuilder()
      .disjunctive()
      .atomicCheck(PROCESS_INSTANCE, "RES.PROC_INST_ID_", READ)
      .atomicCheck(PROCESS_DEFINITION, "PROCDEF.KEY_", READ_INSTANCE)
      .atomicCheck(TASK, "RES.TASK_ID_", READ)
      .build();
   addPermissionCheck(query.getAuthCheck(), permissionCheck);
 }
}