BP-115: Missing Authorization Specifications for Batch Operations

[Luc Clément <luc.clement@activevos.com>]

Assigned: http://www.osoa.org/jira/browse/BP-115

-----Original Message-----
From: Dieter Koenig1 [mailto:dieterkoenig@de.ibm.com] 
Sent: Monday, June 29, 2009 07:27
To: bpel4people@lists.oasis-open.org
Subject: [bpel4people] New Issue: Missing Authorization Specifications for Batch Operations



Target:

WS-HumanTask CD 04 revision 03, section 7.1.5 Operation Authorizations

Description:

The resolution of BP-69 introduced a number of batch operations (see section 7.1.1):
 - batchClaim
 - batchStart
 - batchStop
 - batchRelease
 - batchSuspend
 - batchSuspendUntil
 - batchResume
 - batchComplete
 - batchRemove
 - batchFail
 - batchSetPriority
 - batchSkip
 - batchForward
 - batchDelegate
 - batchActivate
 - batchNominate
 - batchSetGenericHumanRole

The specification of the corrresponding operation authorizations are missing.

Proposal:

Batch operations interact with multiple tasks simultaneously, and the authorization for each interaction has to be decided individually.
Consequently, add the following paragraph to section 7.1.5 Operation Authorizations, right before the table that defines the operation-specific
authorizations:

<newParagraph>
All batch operations (operations with a name prefix "batch") may be invoked by any caller; no specific authorization is required. Missing authorizations for operations on individual tasks result in a report entry in the batch operation's response message.

</newParagraph>

In addition, add a generic entry to the table (operation name = "batch*", all entries = "+").

Kind Regards

Dieter König

Senior Technical Staff Member, WebSphere Process Server Architect IBM Software Group, Application and Integration Middleware Software WSS Business Process Solutions
                                                                                              
                                                                                              
                                                                                              
                                                                                              
                                                                                              
  Phone:            +49-7031-16-3426           IBM Deutschland                      (Embedded 
                                                                                  image moved 
                                                                                     to file: 
                                                                                pic11195.gif) 
                                                                                              
  E-Mail:           dieterkoenig@de.ibm.com    Schönaicher Str. 220                           
                                                                                              
                                               71032 Böblingen                                
                                                                                              
                                               Germany                                        
                                                                                              
                                                                                              
                                                                                              
                                                                                              
                                                                                              
  IBM Deutschland                                                                             
  Research &                                                                                  
  Development                                                                                 
  GmbH /                                                                                      
  Vorsitzender des                                                                            
  Aufsichtsrats:                                                                              
  Martin Jetter                                                                               
  Geschäftsführung:                                                                           
  Erich Baier                                                                                 
  Sitz der                                                                                    
  Gesellschaft:                                                                               
  Böblingen /                                                                                 
  Registergericht:                                                                            
  Amtsgericht                                                                                 
  Stuttgart, HRB                                                                              
  243294