There are properties to set the main/additional Auth-Def-Files:
mgmtp.a12.uaa.authorization.main-definition-resource
mgmtp.a12.uaa.authorization.additional-definition-resources
In Workflows/Camunda, by default it set like this:
- the main file is set for Dataservice-Operations
- the additional file is set for Workflows-Operations
If I want to add an additional Auth-Def-File for Workflows/Camunda by setting it in “additional-definition-resource” do I
- overwrite the default additional file for workflows OR
- amend to (or merge with) the default additional file
Assumed the workflows additional file is important, I want to add or merge my project permissions with the default one.
If it is overwrite: How do I reference to the default additional file correctly? I know the property supports multiple files.
Hi @stefan-grey-canyon,
thank you for your question! I have contacted the mgm experts in this area and they will look into your question. As we are preparing the new release of A12 this may take a few weeks. We’re sorry for the delay.
Hallo @stefan-grey-canyon,
main-definition-resource should only meant for reference to 1 file. One application should have 1 main only.
additional-definition-resources are meant to be a list of files.
When using Data Services, the Workflows authorization definition has a role as “additional” therefore you should reference the authorization definition of workflows in “additional-definition-resources” and using comma separator like this to add more definition files.
In permission definition you are able to decide if the permission should override the main permission by define
call-parent-scope: Flag to indicate that parent permission from main definition file should be executed.
If you want to override the main, then mark this property to false.
If you want to execute on top of the main, then mark this property to true
Default value is true.