The DocumentService
The DocumentService provides the interface to store, load and query data objects (documents) within a database. The service EJB is based on the Java Persistence API (JPA) to store a document into a SQL database and provides also a Lucene Search Index to query documents by a search term. In addition the DocumentService assigns each document with an access control list (ACL). The ACL protects a document from unauthorized access. In case the CallerPrincipal has insufficient rights to access or modify a specific document, the DocumentService throws an AccessDeniedException.
How to Store and Load a Document
A Document in the Imixs-Workflow systems is represented by the ItemCollection class, which presents a generic value object used by all methods of the Imixs-Workflow engine. The DocumentService provides methods to save and load a document.
The following example shows how an instance of an ItemCollection can be saved using the DocumentService:
@EJB
org.imixs.workflow.jee.ejb.DocumentService documentService;
//...
ItemCollection myDocument=new ItemCollection;
myDocument.setItemValue("type","product");
myDocument.setItemValue("name","coffee");
myDocument.setItemValue("weight",new Integer(500));
// save ItemCollection
myDocument=documentService.save(myDocument);
In this example a new ItemCollection is created and the properties 'type, ‘name’ and ‘weight’ are stored into a ItemCollection. The save() method stores the document into the database. If the document is stored the first time, the method generates an ID which can be used to identify the document for later access. This ID is provided in the property ‘$uniqueid’ which will be added automatically by the DocumentService. If the document was saved before, the method updates only the items of the document in the database.
The next example shows how to use the $uniqueid of a stored ItemCollection to load the document from the database. For this the ID is passed to the load() method:
@EJB
org.imixs.workflow.jee.ejb.DocumentService documentService;
//...
// save document
myDocument=documentService.save(myDocument);
// get ID from ItemCollection
String id=myDocument.getUniqueID();
// load the document from database
myDocument=documentService.load(id);
Note: The method load() checks if the CallerPrincipal has read access to a document. If not, the method returns null. The method doesn't throw an AccessDeniedException if the user is not allowed to read the document. This is to prevent an aggressor with informations about the existence of that specific document.
The Document Type
A document is categorized by the item ‘type’. The type attribute can be used to group document or select documents by its type.
ItemCollection myDocument=new ItemCollection;
myDocument.settemValue("type","product");
....
// save ItemCollection
myDocument=documentService.save(myDocument);
// select documents by type...
List<ItemCollection> products=documentService.getDocumentsByType("product");
Creation and Modified Date
The DocumentService also creates TimeStamps to mark the creation and last modified date of a document. These properties are also part of the document returned by the save method. The items are named “$created” and “$modified”.
//...
// save ItemCollection
myDocument=documentService.save(myDocument);
Date created=myDocument.getItemValueDate("$Created");
Date modified=myDocument.getItemValueDate("$Modified");
Immutable Documents
A document can be marked as immutable with the flag
$immutable=true
In this case the document will be protected from further changes. The flag can not be removed once the document was created or updated with this flag. Though deleting a document with the immutable flag is allowed.
Search Documents
The DocumentService provides a Lucene Index to query documents by an individual search query. A document is automatically added into the index when the document is saved. The find() method of the DocumentService can be used to query documents by a Lucene search term.
The following example returns all documents starting with the search term ‘Imixs’:
String serachTerm="(imixs*)";
result=documentService.find(serachTerm);
To query for a specific subset of documents, it is also possible to add individual attributes to the search term. The follwoing example will return all documents with the serach term ‘imixs’ and the Type ‘workitem’:
String serachTerm="(type:'workitem')(imixs*)";
result=documentService.find(serachTerm);
See the section Query Syntax for details about how to search for documents.
Pagination
The DocumentService finder method can also be called by providing a pagesize and a pageindex. With these parameters navigate by pages through a search result. See the following example:
String serachTerm="(imixs*)";
// return only the first 10 documents
result=documentService.find(serachTerm,10,0);
Note that the pageindex starts with 0.
Sorting
Per default the search result is sorted by the lucene internal score of each document returned by the index. To sort the documents by a specific attribute a sortItem and a sort direction can be given:
String serachTerm="(imixs*)";
// return only the first 10 documents
// sort by $created descending
result=documentService.findStubs(serachTerm,10,0,'$created',true);
Document Stubs
The Imixs Search Index provides a feature to store parts of a document directly into the index. This feature allows you to search for the so called ‘Document Stubs’. A Document stub contains only a subset of Items from the full Document. This search method is much faster and can be used to display a preview of a document in the result-set like you know it from the Internet search.
result = documentService.findStubs(query, 100, 0, '$created' , true);
You can later load the full document by the $uniqueid which is part of the document stub.
Count Total Hits
The method count(String) can be used to compute the total hits of a specific serach term. The method expects the same search term as for the find() method but returns only the count of documents. The method counts only ItemCollections which are accessible by the CallerPrincipal.
Count Total Pages
The method countPages(String,int) can be used to compute the total pages of a specific search term by a given page size. The method expects the same search term as for the find() method but returns only the count of documents. The method counts only ItemCollections which are accessible by the CallerPrincipal.
Ignore Index
The DocumentService adds a document automatically into the Lucene search index. This default behavior can be deactivated on document level. To skip a document from indexing the item ‘$noindex’ can be set to ‘true’. In this case the document will not be added/updated in the lucene index. If the document is already indexed it will be removed from the index.
Query Documents
All documents are managed by the Java Persistece API (JPA). The Java Persistence Query Language (JPQL) can be used to select documents by the Document entity schema independent from the existence of the Lucene search index. The following example selects all documents from the type=‘workitem’:
SELECT document FROM Document AS document
WHERE document.type='workitem'
JPQL can be used to sort documents by one of the attributes ‘id’, ‘type’, ‘modified’ or ‘created’. These are the attributtes of the Document Entity Bean. The following example sorts the result by the creation date:
SELECT document FROM Document AS document
WHERE document.type='workitem'
ORDER BY document.created DESC
The Access Control List of a Document
Additional the DocumentService allows to restrict the read- and write access for a document by providing a ACL. The items ‘$readaccess’ and ‘$writeaccess’ can be added into a document to restrict the access. The items can provide a list of UserIds or Roles.
@EJB
org.imixs.workflow.jee.ejb.DocumentService documentService;
//...
ItemCollection myDocument=new ItemCollection;
myDocument.setItemValue("type","product");
myDocument.setItemValue("name","coffee");
myDocument.setItemValue("weight",new Integer(500));
// restrict read access to 'bob'
myDocument.setItemValue("$readaccess","bob");
// restrict write access to 'anna'
myDocument.setItemValue("$readaccess","anna");
// save ItemCollection
myDocument=documentService.save(myDocument);
For further details read the section ACL.
Note: There is no need to set the Read- and Writeaccess programmatic because the ACL of a workitem can be managed model definition in a transparent way.
The UserNameList
The DocumentService provides the method getUserNameList() which returns a list of user names, roles and application groups the current user belongs to.
List<String> userNames = documentService.getUserNameList();
Inject Custom User Groups
Imixs-Workflow supports an mechanism to inject additional user groups into the security layer of the Imxis-Workflow engine.
Based on CDI Events your can inject custom user groups from your own application or library. For example, your application can lookup groups from a LDAP directory or a user-database and inject this groups into the security mechanism.
The typically implementation of this mechanism is done by an CDI observer pattern:
public void onUserGroupEvent(@Observes UserGroupEvent userGroupEvent) {
List<String> customGroups = new ArrayList<String>();
customGroups.add("my-group");
userGroupEvent.setGroups(customGroups);
}
The CDI DocumentEvent
The DocumentService EJB provides an Observer Pattern based on CDI Events. The events are fired when a document is loaded or saved. The Event is defined by the class:
org.imixs.workflow.engine.DocumentEvent
The class DocumentEvent defines the following event types:
- ON_DOCUMENT_SAVE - send immediately before a document will be persisted. The document is already managed by JPA but the transaction is not closed and the lucene index is not updated. So a EJB-Exception can roll back the changes. This event should be handled in the same transaction context.
- ON_DOCUMENT_LOAD - send immediately after a document was loaded. The document may already be managed by JPA (attached) if the document was saved in the same transaction.
- ON_DOCUMENT_DELETE - send immediately before a document will be deleted
This DocumentEvent can be consumed by another Session Bean or managed bean implementing the @Observes annotation:
@Stateless
public class DocumentServiceListener {
public void onEvent(@Observes DocumentEvent documentEvent){
ItemCollection document=documentEvent.getDocument();
System.out.println("Received DocumentEvent Type = " + documentEvent.getType());
}
}
In both event types, an observer client can change the data of the document.