Configuring security in Business Automation Workflow

If you configured security properties in traditional Business Automation Workflow and want to bring them into a container environment, you must use the 100Custom.xml file or Liberty configuration files.

Using 100Custom.xml

The wsadmin command is not available in the containers environment. If you modified the default values of action policies with wsadmin, you must now modify the action policies in 100Custom.xml to achieve the same result.

<properties>
    <server>
        <portal>
            <default-action-policy>
                <action type="ACTION_ABORT_INSTANCE" merge="replace">
                    <role>tw_admins</role>
                </action>
            </default-action-policy>
        </portal>
    </server>
</properties>

For information about action policies in the traditional (on-prem) environment, see Configuration properties for action policies.

To customize 100Custom.xml and update the CR, follow the instructions for your environment type.

For Workflow Runtime: Customizing Business Automation Workflow properties
For Workflow Authoring: Customizing Business Automation Studio properties

Using Liberty configuration

For updating Liberty configuration files for security, create an XML snippet.

For example, the Liberty configuration for BPMServerSecurityUsers.userToCloseTask might be

<?xml version="1.0" encoding="UTF-8"?>
  <server description="IBM BPM Process Server"> 
    <variable name="userToCloseTask" value="${admin_user}" /> 
  </server>

The Liberty configuration for BPMServerSecurityUsers.userToCreateTask might be

<?xml version="1.0" encoding="UTF-8"?>
  <server description="IBM BPM Process Server">
    <variable name="userToCreateTask" value="${admin_user}" />
  </server>

BPMServerSecurityUsers.userToOwnTask has no default value and is not set by default. The Liberty configuration might be

<?xml version="1.0" encoding="UTF-8"?>
  <server description="IBM BPM Process Server">
    <variable name="userToOwnTask" value="${admin_user}" />  
  </server>

BPMServerSecurityUsers.userToOwnTask has no default value and is not set by default. The Liberty configuration might be

<?xml version="1.0" encoding="UTF-8"?>
  <server description="IBM BPM Process Server">
    <variable name="userToOwnTask" value="${admin_user}" />  
  </server>

To customize Liberty with your XML snippet, follow the instructions for your environment type.

For Workflow Runtime: Customizing Business Automation Workflow properties
For Workflow Authoring: Customizing Business Automation Studio properties

Traditional security properties

For traditional Business Automation Workflow security properties that you might want to consider moving to the container environment, see