-
Task
-
Resolution: Unresolved
-
Major
-
7.13
-
None
Some customers have reported issues related to the flag org.kie.server.bypass.auth.user, which in fact are some limitations, so this should be documented. Some Jiras related to it: RHPAM-4277, RHPAM-4270, RHPAM-4136, RHPAM-4321.
The flag is mentioned in the guide "Managing Red Hat Process Automation Manager and KIE Server settings" - however its description is missing there (I would also recommend adding in that table the column Description, as we have in the community doc, it is missing in product doc for "other properties").
After the table I suggest to add a caveat mentioning where that flag will not work.
It will not work if kie-server is deployed on Tomcat or Weblogic and is used JAASUserGroupCallbackImpl; for these two Application Servers, some other callback should be used. Another restriction is if Red Hat SSO is used, in this case the flag may not work properly for any Application Server nor Spring Boot applications. The recommendation is to follow the KCS below if RHSSO is used:
https://access.redhat.com/solutions/6964490
These limitation are only in place when the bypass flag is enabled and the human tasks are assigned to a group. It works fine when Human Tasks are assign to individuals.
- is related to
-
RHPAM-4136 Incorrect groups are returned when "org.kie.server.bypass.auth.user" is set and JAASUserGroupCallbackImpl is used
- Closed
-
RHPAM-4270 [JWS/Tomcat] Incorrect groups are returned when "org.kie.server.bypass.auth.user" is set and JAASUserGroupCallbackImpl is used
- Closed
-
RHPAM-4277 claiming task on openshift using org.kie.server.bypass.auth.user=true not working
- Closed
-
RHPAM-4321 [Weblogic] Incorrect groups are returned when "org.kie.server.bypass.auth.user" is set and JAASUserGroupCallbackImpl is used
- Closed
- relates to
-
JBPM-10110 Need to exclude some bypass integration integration test for specific servers
- Resolved