| Author |
Message
|
| ucbus1 |
 Posted: Thu May 22, 2003 4:39 am Post subject: APIs for getting information from Runtime |
 |
|
Knight
Joined: 30 Jan 2002
Posts: 560
|
If I am correct, Runtime database is FMCDB.So ideally I shoud be able to get all information from FMCDB regarding roles,processes, Categories,users,levels from runtime. Could you please let me know which tables contain this information. Am I allowed to access the database directly (considering programming difficulties and copyrights)? Are there any available APIs available which I can use. Please let me know if you would like me to explain my question further
Thanks |
|
| Back to top |
|
 |
| jmac |
| Posted: Thu May 22, 2003 5:06 am Post subject: |
|
|
Jedi Knight
Joined: 27 Jun 2001
Posts: 3081
Location: EmeriCon, LLC
|
Ucbus:
NO staff APIs exist.
There is no documentation on the tables (other than the View tables and the Audit trail), so you will need to have a close look at them if you want to use them.... HOWEVER, be aware, that if you updated them you will definitely have problems, and also there is NO guarantee that the structure will not change in future releases. IBM recommends NOT using the tables directly.
_________________
John McDonald
RETIRED |
|
| Back to top |
|
|
| Andy |
| Posted: Thu May 22, 2003 5:41 am Post subject: |
|
|
Centurion
Joined: 14 May 2003
Posts: 122
|
No staff APIs but for other things C,C++,Java and ActiveX APIs available,you can refer to Programming Guide.
_________________
 Andy |
|
| Back to top |
|
|
| sshaker |
| Posted: Thu May 22, 2003 7:02 am Post subject: |
|
|
Disciple
Joined: 20 Sep 2002
Posts: 185
|
hi
i agree to the point that the database tables should not be touched..but u can have a look at them.. the table names are self explanatory..
another way of looking 'into' runtime database is .. export the contents using fmcibie.. and look at the fdl file.. to manipulate staff data.. the programming guide gives an idea on diff possibilities..
ldap bridge and substitute person tools other handy stuff for staff management..
regards
shaker
_________________
shaker |
|
| Back to top |
|
|
| ucbus1 |
| Posted: Thu May 22, 2003 9:54 am Post subject: |
|
|
Knight
Joined: 30 Jan 2002
Posts: 560
|
Thanks for the information. My idea is to develop a front end for fmcibie so that one can choose the options and genrate statements needed to run EXPORT command with options. Ideal use could be resetting of passwords on fly by the help desk staff. Please let me know your ideas.
Thanks inadvance |
|
| Back to top |
|
|
| sshaker |
| Posted: Thu May 22, 2003 9:59 am Post subject: |
|
|
Disciple
Joined: 20 Sep 2002
Posts: 185
|
hi
u have to bear in mind the limitations of APIs.. and u can come out with a 'link' or feature or a staff management client which can do basic stuff.
u may even think of add user process .. if it is to add users or modify users .. which is a support pac from ibm workflow support website.. which uses fmcibie as a script (batch file) attached to an activity..
depending on ur requirements u can have multiple options !! all the best .. actually LDAP will be a good idea.. and now u can use LDAP bridge.. which gives lot of flexibility.. for example.. u can have an application/client just updating ur ldap.. and everynight u can synch ur runtime with that ldap data..
regards
shaker
_________________
shaker |
|
| Back to top |
|
|
| Ratan |
| Posted: Thu May 22, 2003 10:00 am Post subject: |
|
|
Grand Master
Joined: 18 Jul 2002
Posts: 1245
|
| Quote: |
Ideal use could be resetting of passwords on fly by the help desk staff. Please let me know your ideas.
|
If all the use that yuo have for this product, is to reset passwords, then you can use the API instead of FMCIBIE. Idont think help desk would be able to do anything more than that.
_________________
-Ratan |
|
| Back to top |
|
|
| jmac |
| Posted: Thu May 22, 2003 10:18 am Post subject: |
|
|
Jedi Knight
Joined: 27 Jun 2001
Posts: 3081
Location: EmeriCon, LLC
|
Ratan:
Are you sure about this???
A user with authorization can retrieve any person object via the ExecutionService::persistentPerson(java.lang.String userID). This is not documented anywhere to my knowledge but I use it all the time.
So I can get the person object.
But then how you can reset the PW? I don't believe there is a method for Person to change PW, its only the logged in user's password you can change. Maybe I am missing something... Or just getting old 
_________________
John McDonald
RETIRED |
|
| Back to top |
|
|
| ucbus1 |
| Posted: Thu May 22, 2003 11:03 am Post subject: |
|
|
Knight
Joined: 30 Jan 2002
Posts: 560
|
Thanks..
Ratan,
I have mentioned one of the uses. Other uses I cna think of is exporting FDL using FMCIBIE masking the "limited funtionality" it has. For example, like I have mentioned in one of my earlier questions ability to export "deep" a process. Please refer to my questuion on "FMCIBIE".
sshekar,
Could you please point me to right documentation on "using LDAP in workflow". I am a novice when it comes to LDAP. Any good documentation on LDAP will help a lot.
Thanks |
|
| Back to top |
|
|
| sshaker |
| Posted: Thu May 22, 2003 11:27 am Post subject: |
|
|
Disciple
Joined: 20 Sep 2002
Posts: 185
|
hi Mr.?? ucbus
pl have a look at the admin guide of 3.4 part 2
i am pasting the contents for ur ready ref.. actually i am struggling with the substitute person tool to achieve some requirements!!
regards
shaker
Part 2. Staff administration
Chapter 3. Introduction to staff
administration. . . . . . . . . . . 33
MQ Workflow LDAP Bridge . . . . . . 33
Substitute Person Tool . . . . . . . . 35
Chapter 4. How to configure the staff
administration tools. . . . . . . . . 37
Configuration properties file . . . . . . 37
Devices . . . . . . . . . . . . 38
Parameters for accessing the LDAP server 38
Parameters for accessing FDL files . . . 39
Parameters for an empty input device . . 41
Filter definitions . . . . . . . . . 41
Substitute person definition. . . . . . 43
Logging and tracing definitions . . . . 43
Mapping file. . . . . . . . . . . . 43
AttributeReferenceMapping. . . . . . 44
ConstantMapping . . . . . . . . . 44
Conversion . . . . . . . . . . . 45
DirectAttributeMapping . . . . . . . 46
FDLAttribute. . . . . . . . . . . 46
FDLObjectClass. . . . . . . . . . 48
ImmediateBelowMapping . . . . . . 48
LDAPAttribute . . . . . . . . . . 50
LDAPObjectClass . . . . . . . . . 50
LDAPQuery . . . . . . . . . . . 50
LDAPSearch . . . . . . . . . . . 51
MappingSpecs . . . . . . . . . . 52
Chapter 5. How to use the staff
administration tools. . . . . . . . . 53
Command-line options . . . . . . . . 53
Authorizationconsiderations . . . . . . 54
Setting up the LDAP Bridge. . . . . . . 54
Loading the LDAP directory for the first time 55
Updating the FDL file from the LDAP
directory . . . . . . . . . . . . . 56
Clearing the LDAP directory . . . . . . 58
Using the Substitute Person Tool . . . . . 59
_________________
shaker |
|
| Back to top |
|
|
| Ratan |
| Posted: Thu May 22, 2003 12:21 pm Post subject: |
|
|
Grand Master
Joined: 18 Jul 2002
Posts: 1245
|
| jmac wrote: |
Ratan:
Are you sure about this???
A user with authorization can retrieve any person object via the ExecutionService::persistentPerson(java.lang.String userID). This is not documented anywhere to my knowledge but I use it all the time.
So I can get the person object.
But then how you can reset the PW? I don't believe there is a method for Person to change PW, its only the logged in user's password you can change. Maybe I am missing something... Or just getting old |
I am wrong. I thought I could do it. Checked the API again and realized I cant change the password for an arbitrary user. I can change only for the logged on user.
_________________
-Ratan |
|
| Back to top |
|
|
| slnelson76 |
| Posted: Tue May 27, 2003 11:53 am Post subject: Manually doing it |
|
|
Novice
Joined: 02 Apr 2003
Posts: 13
Location: Iowa
|
We fought with trying to manage the users for quite awhile. Even tried to get the Server People to give us access to the Runtime DB to manage users. For obvious reasons they don't allow it. We have some pretty complicated logic for determining user/roles who is authed for whom etc. Neither our LDAP source or the LDAP bridge is really capable of storing/using this information to generate the FDL.
Our solution, for better or for worse, was to shoot all the employees....er nevermind, that one got thrown out early....
Rather we developed a database that basically mirrored the structures contained in the Runtime database, then tagged some relations that determine Authed for stuff. Then we tagged a little export utility that pops an FDL out of this data. It actually works quite well. We have several thousand employees who we have to manage on a daily basis. It's not to bad.
Oh, and on passwords....use an authentication user exit (CommandHandler/Viewer type thing) to authenticate via a source of your choosing. As a matter of fact use as little of WF's user API as possible because it is cra....er under-implemented.
-Steve |
|
| Back to top |
|
|
|
|
