Grant approval

Description

This step is used to define the custom form that will be used by the users who have to approve or to reject the generated task. To configure that step will be necessary to determine the fields that will be showshown to the users, and the actions that these users could perform.

Steps Tabs

Task details

In this tab you could configure next parameters:

• Task name: identified name for the task that will be createdcreated.
when
• Permission request screen type: allows selecting the workflowtype of screen for permission request. 
  • List of permissions
  • Display approval pending: that is requested.the default option. When you select that option, all the approval pending will be shown to the end-user.
  • Display all
  • Display approved
  • Display denied
• Actor(s) expression: allows you to write an expression to identify the actor depending on the requested role. One can use EL expressions (*) based on role and application attributes. For instance: SOFFID_MANAGER/${owners}primaryGroup}
• Assignment script: alternatively, allows you to write a Beanshell script to return the actor depending on the process variables. For instance: return primaryGroup.attributes{"owner"};
• Approve from email: checked it to allows you to send a mail forto approvalapprove or deny the task. If you check that option (selected value Yes) , you need to fill in the transitions to approve and deny the task, those have to match with the outgoing transtions defined for thos step.
  • Approval transition: has to match with a outgoing transition.
  • Denial transition: has to match with a outgoing transition.

To send mail, you will need to configure mail server parameters. You can visit the Soffid parameters page for more information.

Example Assignment script

If a user belongs to the primary group "World", the manager of that group will be the responsible to approve or deny the request. If the primary group is other, the persona who will be the responsible to approve or deny will be the manager of the parent group of that group. If there are not primary group, the request will be sent to the admin user.

primaryGroup = executionContext.getVariable("primaryGroup");
if (primaryGroup != null && !primaryGroup.equals("")) {
  	if (primaryGroup.equals("world")) {
      	manager = serviceLocator.getGroupService().findGroupByGroupName(primaryGroup).getAttributes().get("manager");
      	return manager;		
	} else {
      group = serviceLocator.getGroupService().findGroupByGroupName(primaryGroup);
	  if ( group.parentGroup != null && !group.parentGroup.equals("")) {
        	manager = serviceLocator.getGroupService().findGroupByGroupName(group.parentGroup).getAttributes().get("manager");
			return manager;
      }
    }
} else {
	return "admin";
}

Fields

In this tab, you could choose what fields the process form will show to the end end-users. You can choose these fields from all identity attributes, and from the attributes defined for the workflow on the Attributes Tab. By default, all the identity attributes will be shown. You can choose the fields you want to show, add new fields, and delete the fields that do not need to generate a task. Also, you can sort the fields, you only need to do drag and drop on the Order column.

For each field you may indicate if it is a readOnly field, and you may add Validation script and Visibility script. The validation script allows you to define rules, the field has to comply with these rules. The visibility script allows you to define the rules to show or hide a field.

Example

if (value == null || value.equals(""))
  return ("The NIFuser is mandatory");
else 
  return true;

Trigger

On the trigger tab you could define different triggers using custom scripts. Those triggers will be launched with the events you will define.

• onLoad: you can use that trigger to perform some actions before the execution of the step.
• on PrepareTransition: you can use that trigger to perform some actions after the execution of the step and before to start a transition to another step.
• onChange: you can use that trigger to perform some actions hen the value of the attribute if changed. You could choose the filed from a list.

Example

requester = task.getVariables().get("requester");
systemName= task.getVariables().get("systemName");
.......

Incoming transitions

The Incoming transitions tab displays the previous steps where the flow comes from. When you create a process from a template or from scratch default incoming transitions are defined. It is allowed to customize the default set up, add new transitions or delete transitions.

• From: the previous step, where the flow come. Allows you to select where the workflow comes from.
• Incoming transition: brief name to identify the transition. That is the name of the action the form will show to the final user.
• To: current step.
• Action: allows creating a custom script to perform specific actions.

Example

Get the ownersValidation of anmandatory account and to do something with each one.fields:

accountsa = serviceLocator.getAccountService().findAccountByJsonQuery("name eq \"" + executionContext.getVariable("account") + "\""firstName");
if (!accounts.isEmpty(a==null || "".equals(a.trim()))
  throw new Exception("First name is mandatory");

a = executionContext.getVariable("lastName");
if (a==null || "".equals(a.trim()))
  throw new Exception("Last name is mandatory");

a = executionContext.getVariable("primaryGroup");
if (a==null || "".equals(a.trim()))
  throw new Exception("Primery group is mandatory");

return true;

To request the process is only allowed for Internal users:

userSelector = executionContext.getVariable("userSelector");
user = serviceLocator.getUserService().findUserByUserName(userSelector);
if (user.userType.equals("I") || user.userType.equals("S")) {
	throw new Exception ("To request the process is only allowed for (account:accounts)Internal {
		owners = serviceLocator.getAccountService(users").getAccountUsers(account);
		// TO-DO
	}
}

OutgoinOutgoing transitions

The Outcoming transition tab displays the next steps where the flow can go from the current step. When you create a process from a template or from scratch default outcoming transitions are defined. It is allowed to customize the default set up, add new transitions or delete transitions.

• From: current step.
• Incoming transition: name of the transition.
• To: the next step, where the flow go.
• Action: allows creating a custom script to perform specific actions.

When you create an outcoming transition, Soffid creates the proper incoming transition.

Example

GetTo scroll through the maillist of thevalues requesterto andperform sendsome aoperatations. notification.

requestergrants = executionContext.getVariable("requester"grants");
userfor =(roleRequestInfo:grants) serviceLocator.getUserService().findUserByUserName(requester);{
  serviceLocator.getMailService().sendTextMail(// user.emailAddress,TO-DO
"Resquest Rejected",
  "XXXXXXXXXXXXX");}

* https://es.wikipedia.org/wiki/Expression_Language