System Actions

System actions provide access control to services of components on the TIBCO ActiveMatrix BPM node. Specifying access to these services is modeled in the organization model that is built in TIBCO Business Studio.

The table below lists the names, parent components, and default value of all defined system actions.

Name is the name of the system action.
Required to execute lists the web service operations (and Service Connector methods, which use the same names) that require the system action.
Component identifies the BPM component that owns this system action:
- BDS - Business Data Services
- BRM - Business Resource Management
- DAC - Deadline and Calendar
- DE - Directory Engine
- EC - Event Collector
- PE - Process Manager
- WSB - Workspace
Default value is the system-wide default value applied to this system action:
- Allowed - The system action can be performed by any user without authorization.
- Denied - The system action cannot be performed by any user unless they have the correct authorization.

Both the component and the system action name must be specified when calling some SecurityService functions (for example, listActionAuthorisedEntities and listAuthorisedOrgs).

System action names and components
System action	Required to execute	Comp.	Default value
accessGlobalDataScripts	getAuditInfo getCaseModel	BDS	Denied
administerGlobalDataScripts	updateDBScripts	BDS	Denied
applicationConfiguration	Not currently used	WSB	Denied
autoOpenNextWorkItem	deleteOrgEntityConfigAttributes ¹ setOrgEntityConfigAttributes	BRM	Allowed
browseModel	getCalendarReferences getOrgModel listOrgModelVersions	DE	Allowed
bulkCancelProcessInstances	cancelProcessInstances	PE	Denied
bulkPurgeProcessInstances	checkPurgeTerminatedProcessInstances purgeTerminatedProcessInstances saveTerminatedProcessInstances stopPurgeTerminatedProcessInstances	PE	Denied
bulkResumeProcessInstances	resumeProcessInstances	PE	Denied
bulkSuspendProcessInstances	suspendProcessInstances	PE	Denied
cancelProcessInstance	cancelProcessInstance	PE	Denied
cmisAdmin	deleteDocument deleteOrphanedFolders unlinkDocument	BDS	Denied
cmisUser	createDocument findDocuments getDocumentContent getDocumentMetadata getFolderContent linkDocument moveDocument	BDS	Allowed
cancelWorkItem	Not currently used	BRM	Allowed
changeAllocatedWorkItemPriority	setWorkItemPriority	BRM	Allowed
changeAnyWorkItemPriority	setWorkItemPriority	BRM	Denied
closeOtherResourcesItems	closeWorkItem (in WorkItemManagementService) Note - This system action is needed only when closing a work item that is allocated to another user.	BRM	Denied
createGlobalData	createCase	BDS	Allowed
createResourceAdmin	createResource updateResource	DE	Denied
deleteGlobalData	deleteCaseByCID deleteCaseByRef	BDS	Denied
deleteCalendars	deleteCalendarEntries purgeCalendarEntries	DAC	Denied
deleteLDAPAdmin	deleteContainer	DE	Denied
deleteResourceAdmin	deleteContainer deleteResource purgeDeletedResources	DE	Denied
executeBusinessService	cancelBusinessService cancelPageFlow injectBusinessService injectPageFlow startBusinessService startPageFlow updateBusinessService updatePageFlow	BIZSVC	Allowed
exportLDAPAdmin	exportResources	DE	Denied
haltedProcessAdministration	getAvailableProcessInstanceVariables ignoreProcessInstance ignoreProcessInstances resumeHaltedProcessInstance resumeHaltedProcessInstances retryProcessInstance retryProcessInstances setAvailableProcessInstanceVariables	PE	Denied
handleProcessMigration	clearMigrationRules getMigrationPoints isSetMigrationRule listMigrationRules setMigrationRules unsetMigrationRules	PE	Denied
importLDAPAdmin	importResources	DE	Denied
LDAPAdmin²	executeLdapQuery getCandidateDetail getLdapEntry listAttributeNames listCandidateResources listContainers listLdapConnections saveContainer setExtensionPoint setGroupCandidateQuery setPositionCandidateQuery	DE	Denied
listBusinessServices	listPageFlows listBusinessServices listCaseAction listCategories queryBusinessServices queryCategories	BIZSVC	Allowed
listProcessTemplateAuditTrail	Not currently used	EC	Allowed
manageDataViews	createDataView editDataView deleteDataViewByID deleteDataViewByName	BDS	Denied
openOtherResourcesItems ³	openWorkItem	BRM	Denied
openWorkItemAuditTrail	Not currently used	EC	Allowed
organizationAdmin ⁴	setExtensionPoint	DE	Denied
pendWorkItem	pendWorkItem	BRM	Allowed
purgeProcessInstances	Not used	PE	Denied
queryAudit	addCaseComment addProcessInstanceComment addWorkItemComment getChart getChartData getCaseComments getProcInstComments getSearchCaseComments getWorkItemComments	EC	Allowed
queryProcessInstance	decodeProcessId getActivityInstanceStatus getParameterValue getProcessInstanceStatus getProcessInstanceSummary listProcessInstanceAttributes listProcessInstances queryDone queryFirstPage queryHaltedProcessInstances queryLastPage queryNextPage queryPreviousPage queryProcessInstanceCount queryProcessInstances queryProcessInstancesAlt	PE	Allowed
queryProcessTemplate	getStarterOperationInfo listProcessTemplateAttributes listProcessTemplates listServices listStarterOperations queryProcessTemplateCount queryProcessTemplates queryProcessTemplatesAlt	PE	Allowed
readCalendars	calcDeadline getCalendarEntries getCalendar getCalendarReferences listCalendars resolveReferences	DAC	Allowed
readGlobalData	getCaseModelBasicInfo readCase navigateCase navigateCaseByCriteria findAllCases findCaseByCID findCaseByExample getCaseReferencesForDataViewByAdhocView getCaseReferencesForDataViewByID getCaseReferencesForDataViewByName getDataViewDetailsByApp getDataViewDetailsByCaseClass getDataViewDetailsByCategory getDataViewDetailsByID getDataViewDetailsByName getDataViewDetailsByUncategorized getDataViewCategories	BDS	Allowed
readParameters	Not currently used	DE	Allowed
readPushDestinations	Not currently used	DE	Allowed
reallocateToOfferSet	reallocateWorkItem ⁵ reallocateWorkItemData	BRM	Denied
reallocateWorkItemToWorld	reallocateWorkItem reallocateWorkItemData	BRM	Denied
rescheduleWorkItem	rescheduleWorkitem	BRM	Denied
resolveResource	getResource archivedResources findByEntity findByName findByDN	DE	Allowed
resourceAdmin	createResource deleteResource updateResource purgeDeletedResources listCandidateResources setGroupCandidateQuery setPositionCandidateQuery deleteContainer	DE	Denied
resumeProcessInstance	resumeProcessInstance	PE	Denied
scheduleWorkItem	Not currently used by any public API	BRM	Allowed
setDeadlineExpiration	setDeadlineExpiration	PE	Denied
setPriority	setPriority	PE	Denied
setResourceOrderFilterCriteria ⁶	getResourceOrderFilterCriteria	BRM	Denied
showProcessInstanceAuditTrail	Not currently used	EC	Allowed
skipWorkItem	skipWorkItem	BRM	Denied
startAndCancelAdHocActivity	runAdhocActivity cancelAdhocActivity	PE	Allowed
startBusinessService	This system action is no longer used. It is superceded by the executeBusinessService system action.	WSB	Allowed
startprocess	createProcessInstance	PE	Allowed
suspendProcessInstance	suspendProcessInstance	PE	Denied
suspendWorkItem	Not currently used by any public API	BRM	Allowed
updateGlobalData	updateCase linkCase unlinkCase	BDS	Allowed
userAdmin ⁷	deleteUserSettings getUserSettings listUserSettingIds saveUserSettings	DE	Allowed
viewWorkList	addCurrentResourceToView deleteCurrentResourceFromView deleteWorkListView getAllocatedWorkListItems getEditableWorkListViews getPublicWorkListViews getViewsForResource getWorkListItems getWorkListItemsForView getWorkListViewDetails unlockWorkListView	BRM	Denied
viewGlobalWorkList	getWorkListItems (when requesting for all resources) getWorkListItemsForGlobalData getWorkListItemsForView	BRM	Denied
workItemAllocation	allocateAndOpenNextWorkItem allocateAndOpenWorkItem allocateWorkItem unallocateWorkItem	BRM	Denied
writeCalendars	copyCalendar createCalendarEntry createRecurringEntry createCalendarReferences renameCalendar saveBaseCalendar saveOverlayCalendar updateCalendarEntry updateRecurringEntry	DAC	Denied
writeParameters	Not currently used	DE	Allowed
writePushDestinations	setPushDestination updatePushDestinations	DE	Denied

¹ This system action is required only if you are using these functions to set or to delete the WorkItemAutoOpen attribute.

² For certain DirectoryService functions, this system action gives the caller access to all organizations, regardless of the organization relationships that are set up. For more information, see Overriding Organization Relationships.

³ This system action is required only when opening a work item allocated to another user.

⁴ This system action is used to override organization relationships when calling OrgModelService functions. Users possessing this system action can see all organizations when calling OrgModelService functions that return organization elements, regardless of the organization relationships that are set up. For more information, see Overriding Organization Relationships.

⁵ The reallocateWorkItem and reallocateWorkItemData functions allow you to reallocate work items to users in the original offer set if you have the reallocateToOfferSet system action, or to any user in the organization model if you have the reallocateWorkItemToWorld system action.

⁶ Only the setResourceOrderFilterCriteria system action at the organization model level is used; the scoped setResourceOrderFilterCriteria system action (i.e., the one at the group, organization unit, and position level) is not currently used.

⁷ Note that the userAdmin system action appears as "User Settings" in TIBCO Business Studio, rather than "User Admin". When passed in API calls, pass "userAdmin".

Contents

Index

Search Results

System Actions