Aciviti流程权限管理实战

短命女 2021-07-24 22:50 365阅读 0赞

**一 代码**

package com.syc.activiti;
    
    
    import java.util.List;
    
    
    import org.activiti.engine.IdentityService;
    import org.activiti.engine.ProcessEngine;
    import org.activiti.engine.ProcessEngineConfiguration;
    import org.activiti.engine.ProcessEngines;
    import org.activiti.engine.RepositoryService;
    import org.activiti.engine.identity.Group;
    import org.activiti.engine.identity.User;
    import org.activiti.engine.repository.Deployment;
    import org.activiti.engine.repository.ProcessDefinition;
    import org.activiti.engine.task.IdentityLink;
    
    
    /**
    * 查询流程定义的权限数据
    *
    */
    public class CandidateQuery {
    
    
        public static void main( String[] args ) {
            // 创建流程引擎
            ProcessEngine engine = ProcessEngines.getDefaultProcessEngine();
            // 得到流程存储服务实例
            RepositoryService repositoryService = engine.getRepositoryService();
            // 得到身份服务组件
            IdentityService identityService = engine.getIdentityService();
            // 部署流程描述文件
            Deployment dep = repositoryService.createDeployment()
                    .addClasspathResource("bpmn/candidateQuery.bpmn").deploy();
            // 添加2个用户
            creatUser(identityService, "user1", "张三", "张三", "mail1", "123");
            creatUser(identityService, "user2", "李四", "李四", "mail2", "123");
            // 添加2个用户组
            createGroup(identityService, "group1", "经理组", "manager");
            createGroup(identityService, "group2", "员工组", "employee");
            // 查询流程定义
            ProcessDefinition def = repositoryService
                    .createProcessDefinitionQuery().deploymentId(dep.getId())
                    .singleResult();
            // 设置权限数据
            repositoryService.addCandidateStarterGroup(def.getId(), "group1");
            repositoryService.addCandidateStarterGroup(def.getId(), "group2");
            repositoryService.addCandidateStarterUser(def.getId(), "user1");
            repositoryService.addCandidateStarterUser(def.getId(), "user2");
            // 根据用户查询用权限的流程定义
            List<ProcessDefinition> defs = repositoryService
                    .createProcessDefinitionQuery().startableByUser("user1").list();
            System.out.println("用户张三有权限的流程定义为：");// 结果为1
            for (ProcessDefinition dft : defs) {
                System.out.println("   " + dft.getName());
            }
            // 根据流程定义查询用户组数据
            List<Group> groups = identityService.createGroupQuery()
                    .potentialStarter(def.getId()).list();
            System.out.println("以下用户组对流程定义有权限：");
            for (Group group : groups) {
                System.out.println("   " + group.getName());
            }
            // 根据流程定义查询用户数据
            List<User> users = identityService.createUserQuery()
                    .potentialStarter(def.getId()).list();
            System.out.println("以下用户对流程定义有权限：");// 结果为2
            for (User user : users) {
                System.out.println("   " + user.getFirstName());
            }
            // 根据流程定义查询全部的 IdentityLink（ACT_RU_IDENTITYLINK表） 数据
            List<IdentityLink> links = repositoryService
                    .getIdentityLinksForProcessDefinition(def.getId());
            System.out.println("与流程定义相关的数据量： " + links.size());// 结果为4
        }
    
    
        // 将用户组数据保存到数据库中
        static void createGroup( IdentityService identityService, String id,
                                 String name, String type ) {
            // 调用newGroup方法创建Group实例
            Group group = identityService.newGroup(id);
            group.setName(name);
            group.setType(type);
            identityService.saveGroup(group);
        }
    
    
        // 创建用户方法
        static void creatUser( IdentityService identityService, String id,
                               String first, String last, String email, String passwd ) {
            // 使用newUser方法创建User实例
            User user = identityService.newUser(id);
            // 设置用户的各个属性
            user.setFirstName(first);
            user.setLastName(last);
            user.setEmail(email);
            user.setPassword(passwd);
            // 使用saveUser方法保存用户
            identityService.saveUser(user);
        }
    }

**二 流程文件**

<?xml version="1.0" encoding="UTF-8"?>
    <definitions xmlns="http://www.omg.org/spec/BPMN/20100524/MODEL"
        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:activiti="http://activiti.org/bpmn"
        xmlns:bpmndi="http://www.omg.org/spec/BPMN/20100524/DI" xmlns:omgdc="http://www.omg.org/spec/DD/20100524/DC"
        xmlns:omgdi="http://www.omg.org/spec/DD/20100524/DI" typeLanguage="http://www.w3.org/2001/XMLSchema"
        expressionLanguage="http://www.w3.org/1999/XPath" targetNamespace="http://www.activiti.org/test">
        <process id="vacationProcess" name="vacation">
            <startEvent id="startevent1" name="Start"></startEvent>
            <userTask id="usertask1" name="Write Vacation"></userTask>
            <endEvent id="endevent1" name="End"></endEvent>
            <sequenceFlow id="flow1" name="" sourceRef="startevent1"
                targetRef="usertask1"></sequenceFlow>
            <sequenceFlow id="flow2" name="" sourceRef="usertask1"
                targetRef="endevent1"></sequenceFlow>
        </process>
    </definitions>

**三 运行结果**

用户张三有权限的流程定义为：
       vacation
    以下用户组对流程定义有权限：
       经理组
       员工组
    以下用户对流程定义有权限：
       张三
       李四
    与流程定义相关的数据量： 4

**四 数据库**

1 act\_re\_deployment

2 act\_re\_procdef

3 act\_id\_user

mysql> select * from act_id_user;
    +-------+------+--------+--------+--------+------+-------------+
    | ID_   | REV_ | FIRST_ | LAST_  | EMAIL_ | PWD_ | PICTURE_ID_ |
    +-------+------+--------+--------+--------+------+-------------+
    | user1 |    1 | 张三   | 张三   | mail1  | 123  | NULL        |
    | user2 |    1 | 李四   | 李四   | mail2  | 123  | NULL        |
    +-------+------+--------+--------+--------+------+-------------+

4 act\_id\_group

mysql> select * from act_id_group;
    +--------+------+-----------+----------+
    | ID_    | REV_ | NAME_     | TYPE_    |
    +--------+------+-----------+----------+
    | group1 |    1 | 经理组    | manager  |
    | group2 |    1 | 员工组    | employee |
    +--------+------+-----------+----------+
    2 rows in set (0.00 sec)

5 act\_ge\_bytearray

![20200418113216686.png][]

6 act\_ru\_identitylink

[20200418113216686.png]: /images/20210724/a75fe41990cb4810843257625cf76bfc.png