198 Lotus blogs updated hourly. Who will post next? Home | Blogs | Search | About 
 
Latest 7 Posts
Universal Data Replication
Wed, Oct 18th 2017 182
The power of Domain Specific Languages
Thu, Jun 15th 2017 3
Darwino as the IBM Domino reporting graal
Sat, Mar 11th 2017 6
Schemaless GraphQL
Fri, Mar 3rd 2017 7
Get your apps integrated with IBM Connections, cloud and on-premises!
Fri, Feb 17th 2017 7
When SQL meets NoSQL, you get the best of both worlds!
Thu, Jan 26th 2017 6
ReactJS or AngularJS? What about something else?
Wed, Jan 25th 2017 4
Top 10
Universal Data Replication
Wed, Oct 18th 2017 182
Why AngularJS sounds familiar to XPages developers...
Tue, Jan 3rd 2017 11
Darwino, and Java applications, on Microsoft Azure!
Wed, Jul 20th 2016 8
When your Domino app meet the cloud, IBM Connections or Microsoft Azure!
Thu, Sep 22nd 2016 8
Get your apps integrated with IBM Connections, cloud and on-premises!
Fri, Feb 17th 2017 7
Schemaless GraphQL
Fri, Mar 3rd 2017 7
IBM Bluemix - Eclipse Developer Exprience
Mon, May 16th 2016 6
The very first Darwino workshop in Germany was a success!
Tue, Dec 6th 2016 6
The king is dead, long live to the new iOS Java king!
Thu, Dec 22nd 2016 6
When SQL meets NoSQL, you get the best of both worlds!
Thu, Jan 26th 2017 6


Filtering Connections Applications
Twitter Google+ Facebook LinkedIn Addthis Email Gmail Flipboard Reddit Tumblr WhatsApp StumbleUpon Yammer Evernote Delicious
   

Continuing the Connections integration series, I'm going to talk today about getting your application surfaced in the Connections Navbar, like we do for ProjExec:


Ok, there is no magic this time as this is documented as part of the Connections customization guide. There is a file called apps.jsp that needs to be customized with your own entries. Here is an example:
  Projects 

      --%><tr><%-- 
          --%><th scope="row" class="lotusNowrap"><%-- 
            --%><img class="lconnSprite" 
src="/projexec/tgweb20/media/projexec_blue.gif" alt="" 
role="presentation"><%-- 
            --%><a href="/projexec/projexec/pe_main.xsp"><%-- 
               --%><strong>Projects</strong><%-- 
            --%></a><%-- 
         --%></th><%-- 
     
    --%><td class="lotusNowrap"><%-- 
            --%><a 
href="/projexec/projexec/pe_main.xsp?pepage=myprojects"><%-- 
               --%>My Projects<%-- 
               --%></a><%-- 
         --%></td><%-- 
          
         --%><td class="lotusNowrap lotusLastCell"><%-- 
            --%><a 
href="/projexec/projexec/pe_main.xsp?pepage=myportfolios"><%-- 
               --%>My Portfolios<%-- 
            --%></a><%-- 
         --%></td><%-- 
      --%></tr><%-- 

But wait, some customers asked us to hide these entries for the users that are not entitled to ProjExec. Generally, these users are identified using one of their attributes in the enterprise directory, like a group membership, an organization or even a custom attribute.

Then comes the real thing. In ProjExec, we use J2EE roles to control the access to the application, and then we map the roles to LDAP queries (filters). But  these roles are declared in our EAR, and are only valid in our own application context (war file). On the other hand, the NavBar is executing within all Connections applications contexts, where our roles are just unknown. As a result, we can't then use roles and role mapping for it.

Of course, we can use a direct call to LDAP using JNDI. But this has several drawbacks:
  • We need information to connect to the server: address, user/password...
  • We need to know the LDAP schema used by the actual directory (objectclass, attributes...)
  • We should implement a cache to get efficiency, as this code will be executed every time the navigation bar is displayed
Fortunately, WebSphere exposes a generic directory API that hides the points exposed above. It is called Virtual Member Manager, a.k.a VMM. Of course the app server has to be properly configured. I highly recommend the use of the Federated Repositories in this case.
To check if WAS is properly configured, go to the "User and Groups" in the admin console and verify that it accesses both the users (in Manage Users) and the groups (in Manage Groups). Make sure that the org name is not duplicated and the groups properly retrieved (both can happen when the LDAP directory is a domino server)
Example:


Ok, once WAS is setup, then let's add the real code. In our case, we'd like to enable the ProjExec menu entries if the current user belongs to the 'projexec' group.
We did that by creating a simple hasProjExecRole() method, and then wrap the ProjExec menu items within a test (all in blue bellow). See how the WSCredential API from WebSphere is being used, independently of the actual directory server being used.

Voila, this is it.

=== DO NOT CHANGE ===

   The <lc-ui:serviceLink /> tag can be used to generate links to any service defined in
   LotusConnections-config.xml.

--%>
<%!
   public boolean hasProjExecRole() {
      try {
         java.util.Set creds = com.ibm.websphere.security.auth.WSSubject.getCallerSubject().getPublicCredentials(com.ibm.websphere.security.cred.WSCredential.class);
         for(Object _c: creds) {
            com.ibm.websphere.security.cred.WSCredential c = (com.ibm.websphere.security.cred.WSCredential)_c;
            java.util.List groups = c.getGroupIds();
            if(groups.contains("ProjExec")) {
               return true;
            }
         }
      } catch(Exception ex) {
         ex.printStackTrace();
      }
      return false;
   }
%>

<div role="document"><table class="lotusLayout lotusNavMenuLarge" cellpadding="0" cellspacing="0"><%-- 
   
  Projects 

   --%><c:if test="<%=hasProjExecRole()%>"><%--
      --%><tr><%-- 
          --%><th scope="row" class="lotusNowrap"><%-- 
            --%><img class="lconnSprite" 
src="/projexec/tgweb20/media/projexec_blue.gif" alt="" 
role="presentation"><%-- 
            --%><a href="/projexec/projexec/pe_main.xsp"><%-- 
               --%><strong>Projects</strong><%-- 
            --%></a><%-- 
         --%></th><%-- 
     
    --%><td class="lotusNowrap"><%-- 
            --%><a 
href="/projexec/projexec/pe_main.xsp?pepage=myprojects"><%-- 
               --%>My Projects<%-- 
               --%></a><%-- 
         --%></td><%-- 
          
         --%><td class="lotusNowrap lotusLastCell"><%-- 
            --%><a 
href="/projexec/projexec/pe_main.xsp?pepage=myportfolios"><%-- 
               --%>My Portfolios<%-- 
            --%></a><%-- 
         --%></td><%-- 
      --%></tr><%-- 
   --%></c:if><%--





---------------------
http://blog.riand.com/2014/07/filtering-connections-applications.html
Jul 31, 2014
4 hits



Recent Blog Posts
182
Universal Data Replication
Wed, Oct 18th 2017 7:21p   Philippe Riand
One of the Darwino piece of code that I'm the most proud of is the replication engine. If a majority of our customers see it as a Domino to JSON replication engine, it goes far beyond that. In reality, it can replicate between virtually any data sources. It is a true, two ways, multi-point replication engine, borrowing some ideas from IBM Domino but going beyond its venerable ancestor in multiple places. The architectureThe main idea is that any data set can be represented as a set decorated J
3
The power of Domain Specific Languages
Thu, Jun 15th 2017 11:03p   Philippe Riand
We are all used to configuration files, whenever they are XML, JSON or simply text based. If this is ok for simple configurations, but it falls short when the complexity increases. The biggest issue is that they cannot provide more than what they are designed for, basically static values. Let's suppose, for example, that we have an XML configuration file exposing a property like: trueOk, simple enough. This property can be true or false. But now what if I want a more dynamic value, like true
6
Darwino as the IBM Domino reporting graal
Sat, Mar 11th 2017 8:31p   Philippe Riand
Reports, dashboards, data analytics... have been the conundrum of IBM Notes/Domino since the beginning. Its proprietary data structure, the absence of standard APIs and its deficient query capability make it very difficult. This has been ranked as one of the top need for any for business applications. I know several business partners who created great Domino solutions but struggling with poor reporting capabilities. Of course some attempts were made to fix it: LEI, DB2NSF,.. all incomplete and
7
Schemaless GraphQL
Fri, Mar 3rd 2017 11:56p   Philippe Riand
FaceBook officially introduced a few months ago a new technology called GraphQL. Well, rather than really being new, FaceBook made public and open source their internal graph query engine. It starts to be widely used for exposing APIs. For example, IBM Watson Worskpace makes use of it. I also heard that IBM Connections will also use it. In a nutshell, it allows powerful, tailored queries including navigation between the data sources, in a single query. As a result, it minimizes the number of re
7
Get your apps integrated with IBM Connections, cloud and on-premises!
Fri, Feb 17th 2017 4:51a   Philippe Riand
I've been using this blog to share some of the techniques we use in ProjExec to get tightly integrated with the Connections platform. I got a lot of feedback from developers who wanted to know more, so I'm moving a step further: Jesse Gallagher and I will describe these techniques in a breakout session @Connect 2017! DEV-1430 : IBM Connections Integration: Exploring the Long List of Options Program : Development, Design and Tools Topic : Enterprise collaboration Session Type : Breakout Sessio
6
When SQL meets NoSQL, you get the best of both worlds!
Thu, Jan 26th 2017 11:46p   Philippe Riand
At the heart of Darwino is an advanced, portable JSON document store, implemented on top of any relational database. I'm often being asked the following question "why did you implement that on top of an RDBMS?". Behind the scene, the real question is: "why are you not using MongoDB or another nosql database?" Well, I'm generally answering it with multiple arguments:It leverages all the RDBMS well known capabilities: transactions, data integrity, security, backups, performance, reporting, a
4
ReactJS or AngularJS? What about something else?
Wed, Jan 25th 2017 9:25p   Philippe Riand
So far, ProjExec has been a really good citizen in the IBM/ICS world as we tried to reuse the core Connections stack as much as can (Dojo, OneUI, ...). But these technologies start to age while the browser technologies evolved a lot in the past years: what required a whole bunch of JavaScript using Dojo/JQuery can now be squeezed in a few lines using new libraries! It is time to change gears. We started to look at what technology would better fit our needs. The main requirements are: Make the d
11
Why AngularJS sounds familiar to XPages developers...
Tue, Jan 3rd 2017 5:53p   Philippe Riand
When I started to look at AngularJS a few years ago, I surprisingly found myself quickly comfortable with this technology. One of the reason is that many of its concepts are shared with XPages. Of course, there are fundamental differences, the most obvious being AngularJS a pure client technology while XPages, based on JSF, is a server side one. But still, they share a lot! If you know XPages, your experience understanding AngularJS should be similar to mine. I'm basing my experience on Angul
6
The king is dead, long live to the new iOS Java king!
Thu, Dec 22nd 2016 11:08p   Philippe Riand
When presenting Darwino, I'm often asked the question how do we run Java natively on iOS, or other platforms that are not known to be Java friendly? Well, we started this journey a few years ago, but the landscape of cross platform Java evolved a lot since that. Let me go through the history and explain where we stand now, as a new king has just been proclaimed. If you thing the story is too long, then just go to Multi OS Engine for the answer. Back to the dark age, the most promising solution
6
The very first Darwino workshop in Germany was a success!
Tue, Dec 6th 2016 5:12p   Philippe Riand
It happened in Cologne, Germany, where 8 different companies joined us to better understand Darwino and get their hands dirty with the code. It reminded me the first XPages workshop we did in Westford in 2008, before we launched the technology at Lotusphere. Same spirit, with highly motivated people, ready to enhance their existing Domino applications!We had several IBM champions, OpenNTF board members, and even the CTO of the great Multi-OS-Engine. If the crowd learnt about the technology, we




Created and Maintained by Yancy Lent - About - Planet Lotus Blog - Advertising - Mobile Edition