Hi, 

we aim to develop a toolkit to add operations which are not in the Content Management toolkit (CMIS limitations).
When a document is added to a folder, the document have to inherit the folder security (FileNet SecurityFolder system properties).

Written with CPE Java API or with GraphQL, is there a way to use the existing 'BPM target store' (see in CM tasks implementation, field 'Server') in the toolkit to retrieve the URL, user and password ?

Thanks for help.

------------------------------
Yannick Martin
------------------------------

Hi Yannik,
without knowing further details on the use case, I'd not recommend to introduce the workflow overhead to address this requirement. If you only want to apply the parent folder security to a document upon creation time, I'd rather recommend to use either a code module which leverages Java CPE API or even an event action based on the JavaScript API instead. Either way the CPE directly calls this code from the event (creation event for the document) and does not create a workflow instance for doing so. Actually, you may want to take a look at this link:
Example

Creating a toolkit which uses the CPE Java or GraphQL API to achieve the same as part of a workflow makes sense in case the workflow really triggers this action (i.e. a user approves a document and this would require that the permissions of the document need to be changed). In that case you already have a workflow and you want to manipulate a content object as part of the workflow.

Triggering a workflow from a content event (document creation or file to folder) just to perform a content operation (update permissions) in that workflow is a significant overhead which I would recommend to avoid, even though it is doable, of course.

Best regards!

------------------------------
Michael Kirchner
Leading Technical Specialist - Digital Business Automation
IBM Technology
Germany
------------------------------

Hi Michel,

we don't want to use the CPE eventframework. 
When users add documents, the entry template by configuration set the security folder. But in some cases the document is created in an activity step (use of Content integration) which doesn't include the security permissions update (CMIS limitation ?).

So in our workflow, we have a java service which sets the security folder thru the CPE API. The only annoying thing is that we need to store the CPE connection informations (URI, user, password, domain, object store) especially the password.
How is it possible to define the password with encryption in the workflow ? We don't want to manage a properties file for that.

That's why we ask about the usage of the 'BPM Target store' object. The requested password is already defined in it.

Thanks

------------------------------
Yannick Martin
------------------------------

Original Message:
Sent: Tue June 08, 2021 04:36 AM
From: Michael Kirchner
Subject: Override Content Management toolkit

Hi Yannik,
without knowing further details on the use case, I'd not recommend to introduce the workflow overhead to address this requirement. If you only want to apply the parent folder security to a document upon creation time, I'd rather recommend to use either a code module which leverages Java CPE API or even an event action based on the JavaScript API instead. Either way the CPE directly calls this code from the event (creation event for the document) and does not create a workflow instance for doing so. Actually, you may want to take a look at this link:
Example

Creating a toolkit which uses the CPE Java or GraphQL API to achieve the same as part of a workflow makes sense in case the workflow really triggers this action (i.e. a user approves a document and this would require that the permissions of the document need to be changed). In that case you already have a workflow and you want to manipulate a content object as part of the workflow.

Triggering a workflow from a content event (document creation or file to folder) just to perform a content operation (update permissions) in that workflow is a significant overhead which I would recommend to avoid, even though it is doable, of course.

Best regards!

------------------------------
Michael Kirchner
Leading Technical Specialist - Digital Business Automation
IBM Technology
Germany
------------------------------

Hi Yannik,

as CMIS is the smallest common denominator, it is very likely that you cannot explicitly set the security parent via CMIS when creating a document.
This is why I still recommend using the event framework as it is triggered regardless how you create the document (entry template, CMIS, whichever API).

You want to store the CPE connection information for your java service in the workflow (and pass it to the service when you call it, I suppose) but you are searching for a way to store the credentials in the workflow so that a workflow designer cannot reveal it?

Best regards


------------------------------
Michael Kirchner
Leading Technical Specialist - Digital Business Automation
IBM Technology
Germany
------------------------------

Original Message:
Sent: Tue June 08, 2021 08:21 AM
From: Yannick Martin
Subject: Override Content Management toolkit

Hi Michel,

we don't want to use the CPE eventframework. 
When users add documents, the entry template by configuration set the security folder. But in some cases the document is created in an activity step (use of Content integration) which doesn't include the security permissions update (CMIS limitation ?).

So in our workflow, we have a java service which sets the security folder thru the CPE API. The only annoying thing is that we need to store the CPE connection informations (URI, user, password, domain, object store) especially the password.
How is it possible to define the password with encryption in the workflow ? We don't want to manage a properties file for that.

That's why we ask about the usage of the 'BPM Target store' object. The requested password is already defined in it.

Thanks

------------------------------
Yannick Martin
------------------------------


Original Message:
Sent: Tue June 08, 2021 04:36 AM
From: Michael Kirchner
Subject: Override Content Management toolkit

Hi Yannik,
without knowing further details on the use case, I'd not recommend to introduce the workflow overhead to address this requirement. If you only want to apply the parent folder security to a document upon creation time, I'd rather recommend to use either a code module which leverages Java CPE API or even an event action based on the JavaScript API instead. Either way the CPE directly calls this code from the event (creation event for the document) and does not create a workflow instance for doing so. Actually, you may want to take a look at this link:
Example

Creating a toolkit which uses the CPE Java or GraphQL API to achieve the same as part of a workflow makes sense in case the workflow really triggers this action (i.e. a user approves a document and this would require that the permissions of the document need to be changed). In that case you already have a workflow and you want to manipulate a content object as part of the workflow.

Triggering a workflow from a content event (document creation or file to folder) just to perform a content operation (update permissions) in that workflow is a significant overhead which I would recommend to avoid, even though it is doable, of course.

Best regards!

------------------------------
Michael Kirchner
Leading Technical Specialist - Digital Business Automation
IBM Technology
Germany

Hi Michel,

We don't want to proceed from CPE event framework, because the entry template does the trick. Thus the event subscription should be added at document update not creation. 

I want to find a way to store the credential like for the process application settings, tab 'Servers' (Type 'Enterprise Content Management Server') OR to access this business objects with a script in a service.

Thanks

------------------------------
Yannick Martin
------------------------------

Original Message:
Sent: Tue June 08, 2021 09:09 AM
From: Michael Kirchner
Subject: Override Content Management toolkit

Hi Yannik,

as CMIS is the smallest common denominator, it is very likely that you cannot explicitly set the security parent via CMIS when creating a document.
This is why I still recommend using the event framework as it is triggered regardless how you create the document (entry template, CMIS, whichever API).

You want to store the CPE connection information for your java service in the workflow (and pass it to the service when you call it, I suppose) but you are searching for a way to store the credentials in the workflow so that a workflow designer cannot reveal it?

Best regards


------------------------------
Michael Kirchner
Leading Technical Specialist - Digital Business Automation
IBM Technology
Germany
------------------------------


Original Message:
Sent: Tue June 08, 2021 08:21 AM
From: Yannick Martin
Subject: Override Content Management toolkit

Hi Michel,

we don't want to use the CPE eventframework. 
When users add documents, the entry template by configuration set the security folder. But in some cases the document is created in an activity step (use of Content integration) which doesn't include the security permissions update (CMIS limitation ?).

So in our workflow, we have a java service which sets the security folder thru the CPE API. The only annoying thing is that we need to store the CPE connection informations (URI, user, password, domain, object store) especially the password.
How is it possible to define the password with encryption in the workflow ? We don't want to manage a properties file for that.

That's why we ask about the usage of the 'BPM Target store' object. The requested password is already defined in it.

Thanks

------------------------------
Yannick Martin


Original Message:
Sent: Tue June 08, 2021 04:36 AM
From: Michael Kirchner
Subject: Override Content Management toolkit

Hi Yannik,
without knowing further details on the use case, I'd not recommend to introduce the workflow overhead to address this requirement. If you only want to apply the parent folder security to a document upon creation time, I'd rather recommend to use either a code module which leverages Java CPE API or even an event action based on the JavaScript API instead. Either way the CPE directly calls this code from the event (creation event for the document) and does not create a workflow instance for doing so. Actually, you may want to take a look at this link:
Example

Creating a toolkit which uses the CPE Java or GraphQL API to achieve the same as part of a workflow makes sense in case the workflow really triggers this action (i.e. a user approves a document and this would require that the permissions of the document need to be changed). In that case you already have a workflow and you want to manipulate a content object as part of the workflow.

Triggering a workflow from a content event (document creation or file to folder) just to perform a content operation (update permissions) in that workflow is a significant overhead which I would recommend to avoid, even though it is doable, of course.

Best regards!

------------------------------
Michael Kirchner
Leading Technical Specialist - Digital Business Automation
IBM Technology
Germany

Hi Michael,

the easiest way here is to use the system environment variables. We just wanted to avoid duplicating the user and password settings and all external encryption methods.

Thanks

------------------------------
Yannick Martin
------------------------------

Original Message:
Sent: Tue June 08, 2021 09:52 AM
From: Yannick Martin
Subject: Override Content Management toolkit

Hi Michel,

We don't want to proceed from CPE event framework, because the entry template does the trick. Thus the event subscription should be added at document update not creation. 

I want to find a way to store the credential like for the process application settings, tab 'Servers' (Type 'Enterprise Content Management Server') OR to access this business objects with a script in a service.

Thanks

------------------------------
Yannick Martin
------------------------------


Original Message:
Sent: Tue June 08, 2021 09:09 AM
From: Michael Kirchner
Subject: Override Content Management toolkit

Hi Yannik,

as CMIS is the smallest common denominator, it is very likely that you cannot explicitly set the security parent via CMIS when creating a document.
This is why I still recommend using the event framework as it is triggered regardless how you create the document (entry template, CMIS, whichever API).

You want to store the CPE connection information for your java service in the workflow (and pass it to the service when you call it, I suppose) but you are searching for a way to store the credentials in the workflow so that a workflow designer cannot reveal it?

Best regards


------------------------------
Michael Kirchner
Leading Technical Specialist - Digital Business Automation
IBM Technology
Germany


Original Message:
Sent: Tue June 08, 2021 08:21 AM
From: Yannick Martin
Subject: Override Content Management toolkit

Hi Michel,

we don't want to use the CPE eventframework. 
When users add documents, the entry template by configuration set the security folder. But in some cases the document is created in an activity step (use of Content integration) which doesn't include the security permissions update (CMIS limitation ?).

So in our workflow, we have a java service which sets the security folder thru the CPE API. The only annoying thing is that we need to store the CPE connection informations (URI, user, password, domain, object store) especially the password.
How is it possible to define the password with encryption in the workflow ? We don't want to manage a properties file for that.

That's why we ask about the usage of the 'BPM Target store' object. The requested password is already defined in it.

Thanks

------------------------------
Yannick Martin


Original Message:
Sent: Tue June 08, 2021 04:36 AM
From: Michael Kirchner
Subject: Override Content Management toolkit

Hi Yannik,
without knowing further details on the use case, I'd not recommend to introduce the workflow overhead to address this requirement. If you only want to apply the parent folder security to a document upon creation time, I'd rather recommend to use either a code module which leverages Java CPE API or even an event action based on the JavaScript API instead. Either way the CPE directly calls this code from the event (creation event for the document) and does not create a workflow instance for doing so. Actually, you may want to take a look at this link:
Example

Creating a toolkit which uses the CPE Java or GraphQL API to achieve the same as part of a workflow makes sense in case the workflow really triggers this action (i.e. a user approves a document and this would require that the permissions of the document need to be changed). In that case you already have a workflow and you want to manipulate a content object as part of the workflow.

Triggering a workflow from a content event (document creation or file to folder) just to perform a content operation (update permissions) in that workflow is a significant overhead which I would recommend to avoid, even though it is doable, of course.

Best regards!

------------------------------
Michael Kirchner
Leading Technical Specialist - Digital Business Automation
IBM Technology
Germany