[NAE-2235] Improve Efficiency of Database Reads and Saves #383
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
- update loggers in elastic package
- update loggers for MinIoStorageService and mail package
- update loggers in PetriNetService - fix cacheable self-invocation in PetriNetService - remove code that is commented out in PetriNetService - fix nullptr exception in PetriNetService.findByImportId - resolve some warnings in PetriNetService
- optimize ProcessRoleService.delete - add todos - remove redundant method overload in ProcessRoleService
- implement create case performance test
- update method calls after parameters change
- add performance test
- optimize createCase event
- optimize createCase event
- update WorkflowPerformanceTest
- add nets for WorkflowPerformanceTest
- update WorkflowService.deleteCase - optimize WorkflowService.deleteSubtreeRootedAt - optimize logging in TaskService
- change task service method parameters
- optimize TaskService.assignTask
- more optimization for TaskService.assignTask
- optimize TaskService.cancelTask and TaskService.cancelTasksWithoutReload
- optimize TaskService.finishTask
- optimize TaskService.delegateTask
- update TaskService.fillMissingAttributes for delegateTask - update WorkflowPerformanceTest
- small tweaks in DataService
- light optimization of DataService.getData
- light optimization of DataService.setData
- light optimization of DataService.getDataGroups
- light optimizations in workflow package - optimize authorization services
- begin implementation of MVC performance tests
- fix nullptr in TaskAuthorizationService - update WorkflowMvcPerformanceTest
- resolve some small warnings
- introduce optimizations and fixes in ActionDelegate
- small update in ValidationService
- resolve some warning
- add and update fill and validate methods
- rollback PetriNetService.evaluateRules
- ensure initialization of taskId in TaskParams
- rename some CreateCaseParams attributes
- fix initialization of default values in params classes
- rollback ProcessRoleService.isRoleReferenced
- rollback ProcessRoleService.delete
- add javadoc - fix variable initialization in ImportPetriNetParams
WalkthroughConsolidates many service overloads into builder-style parameter objects (ImportPetriNetParams, CreateCaseParams, DeletePetriNetParams, TaskParams, DelegateTaskParams), updates controllers, services, migration/startup helpers, tests, and XML actions to use these parameter objects, and standardizes logging and minor visibility/static changes. Changes
Sequence Diagram(s)sequenceDiagram
participant Controller as Controller / API
participant Builder as Param Builder (with())
participant Service as Service (PetriNet/Workflow/Task)
participant Repo as Repository / DB
Controller->>Builder: Build Import/Create/Task Params
Builder-->>Controller: Param object
Controller->>Service: service.method(paramObject)
Service->>Service: fillAndValidateAttributes(paramObject)
alt valid
Service->>Repo: persist / fetch entities
Repo-->>Service: entities
Service-->>Controller: EventOutcome / Result
else invalid
Service-->>Controller: throw IllegalArgumentException / error outcome
end
Note over Service,Controller: Old: multiple overloads with raw args → New: single param-object entry, centralized validation
Estimated code review effort🎯 5 (Critical) | ⏱️ ~120+ minutes Areas to focus during review:
Possibly related PRs
Suggested labels
Pre-merge checks❌ Failed checks (1 warning)
✅ Passed checks (2 passed)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 21
Caution
Some comments are outside the diff and can’t be posted inline due to platform limitations.
⚠️ Outside diff range comments (5)
application-engine/src/main/groovy/com/netgrif/application/engine/validation/service/ValidationService.groovy (2)
39-64: Consider removing or documenting the commented code.This large block of commented-out code for additional field types reduces readability. If these are planned features, track them in issues and remove the comments. If they're not needed, delete them entirely.
28-28: Add null check to prevent potential NPE.There's no null check on
validation.getValidationRule()before callingtrim().split(). IfgetValidationRule()returns null, this will throw aNullPointerException.Apply this diff to add a null check:
- List<String> rules = validation.getValidationRule().trim().split(" ") + List<String> rules = validation.getValidationRule()?.trim()?.split(" ") + if (rules == null || rules.size() < 1) { + return + } - if (rules.size() >= 1) { AbstractFieldValidation instance = new AbstractFieldValidation() // ... rest of the code - }application-engine/src/main/java/com/netgrif/application/engine/mail/MailService.java (1)
102-109: Address the TODO: Remove commented-out code.The commented-out
testConnectionmethod and its TODO should be cleaned up to improve code maintainability.Do you want me to open an issue to track the removal of this dead code, or should it be removed in this PR?
application-engine/src/main/java/com/netgrif/application/engine/startup/runner/DefaultFiltersRunner.java (1)
432-498: Reuse the retrieved logged userYou already fetched the acting user just above. Reusing that instance (and the converted
LoggedUser) here removes two extra service lookups and keeps the executor identity consistent across create/assign/finish. Suggested change:- AbstractUser loggedUser = this.userService.getLoggedOrSystem(); + AbstractUser loggedUser = this.userService.getLoggedOrSystem(); + LoggedUser actingUser = ActorTransformer.toLoggedUser(loggedUser); ... - Case filterCase = this.workflowService.createCase(CreateCaseParams.with() + Case filterCase = this.workflowService.createCase(CreateCaseParams.with() .process(filterNet) .title(title) .color(null) - .author(ActorTransformer.toLoggedUser(loggedUser)) + .author(actingUser) .build()).getCase(); ... - this.taskService.assignTask(TaskParams.with() - .task(newFilterTask) - .user(this.userService.getLoggedOrSystem()) - .build()); + this.taskService.assignTask(TaskParams.with() + .task(newFilterTask) + .user(actingUser) + .build()); ... - this.taskService.finishTask(TaskParams.with() - .task(newFilterTask) - .user(this.userService.getLoggedOrSystem()) - .build()); + this.taskService.finishTask(TaskParams.with() + .task(newFilterTask) + .user(actingUser) + .build());application-engine/src/main/java/com/netgrif/application/engine/workflow/service/TaskAuthorizationService.java (1)
54-117: Restore impersonation-aware permission checksBy replacing every
getSelfOrImpersonated()usage with baregetStringId()/isAdmin()we regress impersonation flows in two ways:
- When an admin impersonates another account, all permission maps remain keyed by the impersonated identity. Looking up
task.getUsers().get(user.getStringId())(and comparingtask.getUserId()touser.getStringId()) now misses that entry, so impersonated users lose their explicit permissions and can no longer finish/assign/cancel their own tasks.- The early admin shortcuts now consult
loggedUser.isAdmin(), which still reflects the real operator. An admin impersonating a non-admin suddenly bypasses all permission checks, meaning the impersonation sandbox is no longer enforced.Both are functional/security regressions in production impersonation scenarios. Please reinstate the impersonation-aware identity before proceeding—e.g.:
- if (!task.getUsers().containsKey(user.getStringId())) { + String effectiveUserId = user.getSelfOrImpersonated().getStringId(); + if (!task.getUsers().containsKey(effectiveUserId)) { return null; } - Map<String, Boolean> userPermissions = task.getUsers().get(user.getStringId()); + Map<String, Boolean> userPermissions = task.getUsers().get(effectiveUserId);and similarly
- if (loggedUser.isAdmin()) { + if (loggedUser.getSelfOrImpersonated().isAdmin()) { return true; }and
- return task.getUserId().equals(user.getStringId()) + String effectiveUserId = user.getSelfOrImpersonated().getStringId(); + return task.getUserId().equals(effectiveUserId)across the affected methods.
Also applies to: 168-209
📜 Review details
Configuration used: CodeRabbit UI
Review profile: ASSERTIVE
Plan: Pro
📒 Files selected for processing (107)
application-engine/src/main/groovy/com/netgrif/application/engine/migration/ActionMigration.groovy(3 hunks)application-engine/src/main/groovy/com/netgrif/application/engine/petrinet/domain/dataset/logic/action/ActionDelegate.groovy(15 hunks)application-engine/src/main/groovy/com/netgrif/application/engine/startup/ImportHelper.groovy(5 hunks)application-engine/src/main/groovy/com/netgrif/application/engine/validation/service/ValidationService.groovy(2 hunks)application-engine/src/main/java/com/netgrif/application/engine/auth/service/LoginAttemptService.java(3 hunks)application-engine/src/main/java/com/netgrif/application/engine/auth/service/RegistrationService.java(5 hunks)application-engine/src/main/java/com/netgrif/application/engine/auth/web/UserControllerAdvice.java(1 hunks)application-engine/src/main/java/com/netgrif/application/engine/configuration/security/ImpersonationRequestFilter.java(2 hunks)application-engine/src/main/java/com/netgrif/application/engine/elastic/service/ElasticCaseMappingService.java(6 hunks)application-engine/src/main/java/com/netgrif/application/engine/elastic/service/ElasticCaseService.java(2 hunks)application-engine/src/main/java/com/netgrif/application/engine/elastic/service/ElasticIndexService.java(1 hunks)application-engine/src/main/java/com/netgrif/application/engine/elastic/service/ElasticPetriNetService.java(2 hunks)application-engine/src/main/java/com/netgrif/application/engine/elastic/service/ElasticTaskQueueManager.java(1 hunks)application-engine/src/main/java/com/netgrif/application/engine/elastic/service/ReindexingTask.java(2 hunks)application-engine/src/main/java/com/netgrif/application/engine/elastic/service/executors/Executor.java(3 hunks)application-engine/src/main/java/com/netgrif/application/engine/files/minio/MinIoStorageService.java(1 hunks)application-engine/src/main/java/com/netgrif/application/engine/mail/MailAttemptService.java(2 hunks)application-engine/src/main/java/com/netgrif/application/engine/mail/MailService.java(3 hunks)application-engine/src/main/java/com/netgrif/application/engine/menu/services/DashboardItemServiceImpl.java(3 hunks)application-engine/src/main/java/com/netgrif/application/engine/menu/services/DashboardManagementServiceImpl.java(3 hunks)application-engine/src/main/java/com/netgrif/application/engine/menu/services/MenuItemService.java(4 hunks)application-engine/src/main/java/com/netgrif/application/engine/petrinet/domain/repositories/PetriNetRepository.java(1 hunks)application-engine/src/main/java/com/netgrif/application/engine/petrinet/params/DeletePetriNetParams.java(1 hunks)application-engine/src/main/java/com/netgrif/application/engine/petrinet/params/ImportPetriNetParams.java(1 hunks)application-engine/src/main/java/com/netgrif/application/engine/petrinet/service/PetriNetService.java(13 hunks)application-engine/src/main/java/com/netgrif/application/engine/petrinet/service/ProcessRoleService.java(9 hunks)application-engine/src/main/java/com/netgrif/application/engine/petrinet/service/interfaces/IPetriNetService.java(4 hunks)application-engine/src/main/java/com/netgrif/application/engine/petrinet/web/PetriNetController.java(4 hunks)application-engine/src/main/java/com/netgrif/application/engine/startup/ApplicationRunnerOrderResolver.java(2 hunks)application-engine/src/main/java/com/netgrif/application/engine/startup/runner/AnonymousRoleRunner.java(1 hunks)application-engine/src/main/java/com/netgrif/application/engine/startup/runner/DefaultDashboardRunner.java(1 hunks)application-engine/src/main/java/com/netgrif/application/engine/startup/runner/DefaultFiltersRunner.java(3 hunks)application-engine/src/main/java/com/netgrif/application/engine/startup/runner/DefaultRoleRunner.java(1 hunks)application-engine/src/main/java/com/netgrif/application/engine/workflow/domain/outcomes/ReloadTaskOutcome.java(1 hunks)application-engine/src/main/java/com/netgrif/application/engine/workflow/params/CreateCaseParams.java(1 hunks)application-engine/src/main/java/com/netgrif/application/engine/workflow/params/DelegateTaskParams.java(1 hunks)application-engine/src/main/java/com/netgrif/application/engine/workflow/params/DeleteCaseParams.java(1 hunks)application-engine/src/main/java/com/netgrif/application/engine/workflow/params/TaskParams.java(1 hunks)application-engine/src/main/java/com/netgrif/application/engine/workflow/service/AbstractAuthorizationService.java(2 hunks)application-engine/src/main/java/com/netgrif/application/engine/workflow/service/CaseSearchService.java(3 hunks)application-engine/src/main/java/com/netgrif/application/engine/workflow/service/ConfigurableMenuService.java(0 hunks)application-engine/src/main/java/com/netgrif/application/engine/workflow/service/DataService.java(21 hunks)application-engine/src/main/java/com/netgrif/application/engine/workflow/service/EventService.java(7 hunks)application-engine/src/main/java/com/netgrif/application/engine/workflow/service/FilterImportExportService.java(3 hunks)application-engine/src/main/java/com/netgrif/application/engine/workflow/service/MenuImportExportService.java(3 hunks)application-engine/src/main/java/com/netgrif/application/engine/workflow/service/MongoSearchService.java(1 hunks)application-engine/src/main/java/com/netgrif/application/engine/workflow/service/TaskAuthorizationService.java(5 hunks)application-engine/src/main/java/com/netgrif/application/engine/workflow/service/TaskSearchService.java(2 hunks)application-engine/src/main/java/com/netgrif/application/engine/workflow/service/TaskService.java(20 hunks)application-engine/src/main/java/com/netgrif/application/engine/workflow/service/WorkflowAuthorizationService.java(3 hunks)application-engine/src/main/java/com/netgrif/application/engine/workflow/service/WorkflowService.java(11 hunks)application-engine/src/main/java/com/netgrif/application/engine/workflow/service/interfaces/IEventService.java(1 hunks)application-engine/src/main/java/com/netgrif/application/engine/workflow/service/interfaces/ITaskService.java(3 hunks)application-engine/src/main/java/com/netgrif/application/engine/workflow/service/interfaces/IWorkflowService.java(2 hunks)application-engine/src/main/java/com/netgrif/application/engine/workflow/web/AbstractTaskController.java(4 hunks)application-engine/src/main/java/com/netgrif/application/engine/workflow/web/PublicWorkflowController.java(2 hunks)application-engine/src/main/java/com/netgrif/application/engine/workflow/web/RestResponseExceptionHandler.java(1 hunks)application-engine/src/main/java/com/netgrif/application/engine/workflow/web/WorkflowController.java(4 hunks)application-engine/src/main/resources/petriNets/engine-processes/import_filters.xml(2 hunks)application-engine/src/main/resources/petriNets/engine-processes/menu/menu_item.xml(3 hunks)application-engine/src/main/resources/petriNets/engine-processes/menu/tabbed_case_view_configuration.xml(2 hunks)application-engine/src/main/resources/petriNets/engine-processes/menu/tabbed_ticket_view_configuration.xml(2 hunks)application-engine/src/main/resources/petriNets/engine-processes/preference_filter_item.xml(1 hunks)application-engine/src/test/groovy/com/netgrif/application/engine/action/AssignActionTest.groovy(2 hunks)application-engine/src/test/groovy/com/netgrif/application/engine/action/MenuItemApiTest.groovy(3 hunks)application-engine/src/test/groovy/com/netgrif/application/engine/auth/SecurityContextTest.groovy(2 hunks)application-engine/src/test/groovy/com/netgrif/application/engine/auth/TaskAuthorizationServiceTest.groovy(9 hunks)application-engine/src/test/groovy/com/netgrif/application/engine/auth/WorkflowAuthorizationServiceTest.groovy(6 hunks)application-engine/src/test/groovy/com/netgrif/application/engine/elastic/DataSearchRequestTest.groovy(2 hunks)application-engine/src/test/groovy/com/netgrif/application/engine/elastic/ElasticTaskTest.groovy(2 hunks)application-engine/src/test/groovy/com/netgrif/application/engine/elastic/ReindexTest.groovy(3 hunks)application-engine/src/test/groovy/com/netgrif/application/engine/export/service/ExportServiceTest.groovy(4 hunks)application-engine/src/test/groovy/com/netgrif/application/engine/filters/FilterImportExportTest.groovy(2 hunks)application-engine/src/test/groovy/com/netgrif/application/engine/importer/PredefinedRolesPermissionsTest.groovy(3 hunks)application-engine/src/test/groovy/com/netgrif/application/engine/importer/UserListTest.groovy(2 hunks)application-engine/src/test/groovy/com/netgrif/application/engine/insurance/EncryptionTest.groovy(2 hunks)application-engine/src/test/groovy/com/netgrif/application/engine/ipc/AssignCancelFinishWithCaseTest.groovy(2 hunks)application-engine/src/test/groovy/com/netgrif/application/engine/ipc/CaseApiTest.groovy(3 hunks)application-engine/src/test/groovy/com/netgrif/application/engine/ipc/TaskApiTest.groovy(7 hunks)application-engine/src/test/groovy/com/netgrif/application/engine/pdf/service/PdfGeneratorTest.groovy(15 hunks)application-engine/src/test/groovy/com/netgrif/application/engine/permissions/ElasticSearchViewPermissionTest.groovy(8 hunks)application-engine/src/test/groovy/com/netgrif/application/engine/permissions/QueryDSLViewPermissionTest.groovy(10 hunks)application-engine/src/test/groovy/com/netgrif/application/engine/petrinet/domain/ArcOrderTest.groovy(2 hunks)application-engine/src/test/groovy/com/netgrif/application/engine/petrinet/domain/FunctionsTest.groovy(8 hunks)application-engine/src/test/groovy/com/netgrif/application/engine/petrinet/domain/ImporterTest.groovy(7 hunks)application-engine/src/test/groovy/com/netgrif/application/engine/petrinet/domain/PetriNetTest.groovy(5 hunks)application-engine/src/test/groovy/com/netgrif/application/engine/petrinet/domain/dataset/CaseFieldTest.groovy(4 hunks)application-engine/src/test/groovy/com/netgrif/application/engine/petrinet/domain/dataset/ChangeBehaviorTest.groovy(2 hunks)application-engine/src/test/groovy/com/netgrif/application/engine/petrinet/domain/dataset/ChangeCasePropertyTest.groovy(4 hunks)application-engine/src/test/groovy/com/netgrif/application/engine/petrinet/domain/dataset/ChangeFieldValueInitTest.groovy(3 hunks)application-engine/src/test/groovy/com/netgrif/application/engine/petrinet/domain/dataset/ChoiceFieldTest.groovy(2 hunks)application-engine/src/test/groovy/com/netgrif/application/engine/petrinet/domain/dataset/DynamicCaseNameTest.groovy(2 hunks)application-engine/src/test/groovy/com/netgrif/application/engine/petrinet/domain/dataset/DynamicChoicesTest.groovy(2 hunks)application-engine/src/test/groovy/com/netgrif/application/engine/petrinet/domain/dataset/DynamicDefaultValueTest.groovy(2 hunks)application-engine/src/test/groovy/com/netgrif/application/engine/petrinet/domain/dataset/DynamicEnumerationTest.groovy(2 hunks)application-engine/src/test/groovy/com/netgrif/application/engine/petrinet/domain/dataset/DynamicValidationPerformanceTest.groovy(2 hunks)application-engine/src/test/groovy/com/netgrif/application/engine/petrinet/domain/dataset/FileFieldTest.groovy(3 hunks)application-engine/src/test/groovy/com/netgrif/application/engine/petrinet/domain/dataset/FileListFieldTest.groovy(3 hunks)application-engine/src/test/groovy/com/netgrif/application/engine/petrinet/domain/dataset/MapFieldTest.groovy(5 hunks)application-engine/src/test/groovy/com/netgrif/application/engine/petrinet/service/CachePetriNetServiceTest.groovy(2 hunks)application-engine/src/test/groovy/com/netgrif/application/engine/petrinet/web/PetriNetControllerTest.groovy(2 hunks)application-engine/src/test/groovy/com/netgrif/application/engine/workflow/DataServiceTest.groovy(2 hunks)application-engine/src/test/groovy/com/netgrif/application/engine/workflow/NewInitTest.groovy(2 hunks)application-engine/src/test/groovy/com/netgrif/application/engine/workflow/SetDataOnButtonTest.groovy(3 hunks)application-engine/src/test/groovy/com/netgrif/application/engine/workflow/TaskRefInitTest.groovy(2 hunks)application-engine/src/test/groovy/com/netgrif/application/engine/workflow/TaskRefPropagationTest.groovy(2 hunks)application-engine/src/test/groovy/com/netgrif/application/engine/workflow/UserRefsTest.groovy(2 hunks)
⛔ Files not processed due to max files limit (19)
- application-engine/src/test/groovy/com/netgrif/application/engine/workflow/WorkflowServiceTest.groovy
- application-engine/src/test/java/com/netgrif/application/engine/importer/ConstructorAndDestructorTest.java
- application-engine/src/test/java/com/netgrif/application/engine/importer/ImporterTest.java
- application-engine/src/test/java/com/netgrif/application/engine/petrinet/service/ProcessRoleServiceTest.java
- application-engine/src/test/java/com/netgrif/application/engine/workflow/WorkflowMvcPerformanceTest.java
- application-engine/src/test/java/com/netgrif/application/engine/workflow/WorkflowPerformanceTest.java
- application-engine/src/test/java/com/netgrif/application/engine/workflow/service/TaskServiceTest.java
- application-engine/src/test/java/com/netgrif/application/engine/workflow/web/VariableArcsTest.java
- application-engine/src/test/resources/change_caseref_value_action_test.xml
- application-engine/src/test/resources/petriNets/test_create_case_performance.xml
- application-engine/src/test/resources/petriNets/test_create_case_performance_with_action.xml
- application-engine/src/test/resources/petriNets/test_task_event.xml
- application-engine/src/test/resources/petriNets/test_task_event_with_action.xml
- nae-object-library/src/main/java/com/netgrif/application/engine/objects/workflow/domain/Case.java
- nae-object-library/src/main/java/com/netgrif/application/engine/objects/workflow/domain/ProcessResourceId.java
- nae-object-library/src/main/java/com/netgrif/application/engine/objects/workflow/domain/Task.java
- nae-object-library/src/main/java/com/netgrif/application/engine/objects/workflow/domain/eventoutcomes/caseoutcomes/ChangeCasePropertyOutcome.java
- nae-spring-core-adapter/src/main/java/com/netgrif/application/engine/adapter/spring/petrinet/service/ProcessRoleService.java
- nae-user-ce/src/main/java/com/netgrif/application/engine/auth/service/UserServiceImpl.java
💤 Files with no reviewable changes (1)
- application-engine/src/main/java/com/netgrif/application/engine/workflow/service/ConfigurableMenuService.java
🧰 Additional context used
🧠 Learnings (16)
📚 Learning: 2025-10-20T11:44:44.907Z
Learnt from: machacjozef
Repo: netgrif/application-engine PR: 367
File: application-engine/src/main/resources/application.yaml:24-24
Timestamp: 2025-10-20T11:44:44.907Z
Learning: In the netgrif/application-engine project, the correction of the Elasticsearch task index name from "_taks" to "_task" in application.yaml was approved by maintainer machacjozef, indicating that any data migration concerns for this typo fix are handled separately or not applicable to their deployment scenario.
Applied to files:
application-engine/src/main/java/com/netgrif/application/engine/elastic/service/ElasticTaskQueueManager.javaapplication-engine/src/main/java/com/netgrif/application/engine/elastic/service/ElasticIndexService.javaapplication-engine/src/main/java/com/netgrif/application/engine/elastic/service/ReindexingTask.javaapplication-engine/src/test/groovy/com/netgrif/application/engine/elastic/ElasticTaskTest.groovyapplication-engine/src/main/java/com/netgrif/application/engine/workflow/web/AbstractTaskController.javaapplication-engine/src/main/java/com/netgrif/application/engine/elastic/service/ElasticCaseMappingService.javaapplication-engine/src/main/java/com/netgrif/application/engine/workflow/service/TaskService.java
📚 Learning: 2025-08-20T07:27:02.660Z
Learnt from: renczesstefan
Repo: netgrif/application-engine PR: 339
File: application-engine/src/main/java/com/netgrif/application/engine/elastic/service/ElasticTaskQueueManager.java:38-45
Timestamp: 2025-08-20T07:27:02.660Z
Learning: When reviewing ElasticTaskQueueManager changes, task.getTask().getId() returns the document identifier while task.getTaskId() returns the business task identifier. The queue operations should use consistent identifiers throughout the lifecycle (scheduling, processing, cleanup).
Applied to files:
application-engine/src/main/java/com/netgrif/application/engine/elastic/service/ElasticTaskQueueManager.javaapplication-engine/src/main/java/com/netgrif/application/engine/workflow/service/interfaces/ITaskService.javaapplication-engine/src/test/groovy/com/netgrif/application/engine/action/MenuItemApiTest.groovyapplication-engine/src/main/java/com/netgrif/application/engine/workflow/web/AbstractTaskController.javaapplication-engine/src/main/java/com/netgrif/application/engine/workflow/service/TaskService.java
📚 Learning: 2025-11-07T13:11:20.622Z
Learnt from: renczesstefan
Repo: netgrif/application-engine PR: 378
File: application-engine/src/main/java/com/netgrif/application/engine/elastic/service/ElasticQueueManager.java:145-149
Timestamp: 2025-11-07T13:11:20.622Z
Learning: In the netgrif/application-engine project, failed Elasticsearch bulk operations in ElasticQueueManager should not be retried or re-queued within the flush() method. The system relies on scheduled reindexing and manual reindex endpoints as fallback mechanisms for failed operations, making in-method retries unnecessary and potentially problematic (could cause deadlocks, capacity issues, or infinite loops with bad data).
Applied to files:
application-engine/src/main/java/com/netgrif/application/engine/elastic/service/ElasticTaskQueueManager.javaapplication-engine/src/main/java/com/netgrif/application/engine/elastic/service/ReindexingTask.java
📚 Learning: 2025-07-31T23:40:46.499Z
Learnt from: tuplle
Repo: netgrif/application-engine PR: 334
File: application-engine/src/main/java/com/netgrif/application/engine/petrinet/service/PetriNetService.java:204-214
Timestamp: 2025-07-31T23:40:46.499Z
Learning: In the PetriNetService.importPetriNet method, existingNet.getVersion() cannot be null because all existing nets in the system were deployed through processes that ensure every net always has a version assigned.
Applied to files:
application-engine/src/test/groovy/com/netgrif/application/engine/ipc/TaskApiTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/auth/WorkflowAuthorizationServiceTest.groovyapplication-engine/src/main/java/com/netgrif/application/engine/petrinet/params/ImportPetriNetParams.javaapplication-engine/src/test/groovy/com/netgrif/application/engine/petrinet/domain/dataset/ChoiceFieldTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/ipc/CaseApiTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/petrinet/domain/dataset/MapFieldTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/workflow/SetDataOnButtonTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/petrinet/domain/dataset/CaseFieldTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/elastic/DataSearchRequestTest.groovyapplication-engine/src/main/java/com/netgrif/application/engine/workflow/service/MenuImportExportService.javaapplication-engine/src/test/groovy/com/netgrif/application/engine/petrinet/domain/dataset/DynamicEnumerationTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/importer/UserListTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/insurance/EncryptionTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/petrinet/domain/ArcOrderTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/petrinet/domain/FunctionsTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/elastic/ElasticTaskTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/petrinet/domain/dataset/DynamicDefaultValueTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/petrinet/domain/PetriNetTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/petrinet/service/CachePetriNetServiceTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/workflow/UserRefsTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/petrinet/domain/ImporterTest.groovyapplication-engine/src/main/java/com/netgrif/application/engine/elastic/service/ElasticPetriNetService.javaapplication-engine/src/main/groovy/com/netgrif/application/engine/startup/ImportHelper.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/auth/TaskAuthorizationServiceTest.groovyapplication-engine/src/main/java/com/netgrif/application/engine/petrinet/web/PetriNetController.javaapplication-engine/src/test/groovy/com/netgrif/application/engine/petrinet/domain/dataset/DynamicValidationPerformanceTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/petrinet/domain/dataset/ChangeFieldValueInitTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/action/AssignActionTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/petrinet/domain/dataset/FileListFieldTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/permissions/ElasticSearchViewPermissionTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/elastic/ReindexTest.groovyapplication-engine/src/main/groovy/com/netgrif/application/engine/migration/ActionMigration.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/workflow/DataServiceTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/importer/PredefinedRolesPermissionsTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/petrinet/domain/dataset/FileFieldTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/petrinet/web/PetriNetControllerTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/pdf/service/PdfGeneratorTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/workflow/TaskRefInitTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/petrinet/domain/dataset/ChangeCasePropertyTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/workflow/NewInitTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/auth/SecurityContextTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/ipc/AssignCancelFinishWithCaseTest.groovyapplication-engine/src/main/java/com/netgrif/application/engine/petrinet/service/PetriNetService.javaapplication-engine/src/test/groovy/com/netgrif/application/engine/petrinet/domain/dataset/DynamicChoicesTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/petrinet/domain/dataset/DynamicCaseNameTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/petrinet/domain/dataset/ChangeBehaviorTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/workflow/TaskRefPropagationTest.groovyapplication-engine/src/main/java/com/netgrif/application/engine/petrinet/service/interfaces/IPetriNetService.java
📚 Learning: 2025-07-29T17:19:18.300Z
Learnt from: tuplle
Repo: netgrif/application-engine PR: 331
File: application-engine/src/main/java/com/netgrif/application/engine/elastic/service/ElasticPetriNetService.java:45-46
Timestamp: 2025-07-29T17:19:18.300Z
Learning: In ElasticPetriNetService class, petriNetService is properly initialized using Lazy setter injection rather than constructor injection. This pattern with Lazy Autowired setter methods is commonly used in Spring to resolve circular dependencies and is a valid alternative to constructor injection.
Applied to files:
application-engine/src/test/groovy/com/netgrif/application/engine/ipc/TaskApiTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/auth/WorkflowAuthorizationServiceTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/workflow/SetDataOnButtonTest.groovyapplication-engine/src/main/java/com/netgrif/application/engine/workflow/service/MenuImportExportService.javaapplication-engine/src/main/java/com/netgrif/application/engine/workflow/service/DataService.javaapplication-engine/src/main/java/com/netgrif/application/engine/workflow/service/WorkflowAuthorizationService.javaapplication-engine/src/main/java/com/netgrif/application/engine/elastic/service/ElasticPetriNetService.javaapplication-engine/src/test/groovy/com/netgrif/application/engine/auth/TaskAuthorizationServiceTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/petrinet/domain/dataset/FileListFieldTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/permissions/ElasticSearchViewPermissionTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/petrinet/domain/dataset/FileFieldTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/workflow/TaskRefInitTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/petrinet/domain/dataset/ChangeCasePropertyTest.groovyapplication-engine/src/main/java/com/netgrif/application/engine/petrinet/service/PetriNetService.javaapplication-engine/src/test/groovy/com/netgrif/application/engine/petrinet/domain/dataset/ChangeBehaviorTest.groovy
📚 Learning: 2025-09-05T10:21:54.893Z
Learnt from: renczesstefan
Repo: netgrif/application-engine PR: 350
File: application-engine/src/test/groovy/com/netgrif/application/engine/export/service/ExportServiceTest.groovy:135-135
Timestamp: 2025-09-05T10:21:54.893Z
Learning: In ExportServiceTest.groovy, writing to src/test/resources is intentional to simulate production behavior where the working tree is mutated during file exports. This mirrors how the system works in production.
Applied to files:
application-engine/src/test/groovy/com/netgrif/application/engine/auth/WorkflowAuthorizationServiceTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/petrinet/domain/dataset/MapFieldTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/workflow/SetDataOnButtonTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/export/service/ExportServiceTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/petrinet/domain/FunctionsTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/elastic/ElasticTaskTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/petrinet/domain/PetriNetTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/auth/TaskAuthorizationServiceTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/elastic/ReindexTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/workflow/DataServiceTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/petrinet/domain/dataset/FileFieldTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/pdf/service/PdfGeneratorTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/workflow/NewInitTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/auth/SecurityContextTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/workflow/TaskRefPropagationTest.groovy
📚 Learning: 2025-09-05T10:17:28.577Z
Learnt from: renczesstefan
Repo: netgrif/application-engine PR: 350
File: application-engine/src/test/groovy/com/netgrif/application/engine/export/service/ExportServiceTest.groovy:82-82
Timestamp: 2025-09-05T10:17:28.577Z
Learning: In the application-engine test suite, testHelper.truncateDbs() follows a two-phase approach: first it clears the databases, then it executes superCreator to create the admin user. This means Optional.get() is safe when retrieving the admin user after truncateDbs() because the admin user is guaranteed to exist.
Applied to files:
application-engine/src/test/groovy/com/netgrif/application/engine/auth/WorkflowAuthorizationServiceTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/elastic/DataSearchRequestTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/workflow/UserRefsTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/auth/TaskAuthorizationServiceTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/permissions/ElasticSearchViewPermissionTest.groovy
📚 Learning: 2025-06-23T13:30:13.096Z
Learnt from: renczesstefan
Repo: netgrif/application-engine PR: 318
File: nae-object-library/src/main/java/com/netgrif/application/engine/objects/workflow/domain/menu/MenuItemConstants.java:60-62
Timestamp: 2025-06-23T13:30:13.096Z
Learning: In MenuItemConstants enum in nae-object-library/src/main/java/com/netgrif/application/engine/objects/workflow/domain/menu/MenuItemConstants.java, the field `attributeId` will be renamed to `value` to make it more generic and appropriate for both dataset attribute identifiers and technical constants like PATH_SEPARATOR.
Applied to files:
application-engine/src/main/java/com/netgrif/application/engine/menu/services/DashboardItemServiceImpl.javaapplication-engine/src/main/resources/petriNets/engine-processes/menu/menu_item.xmlapplication-engine/src/main/java/com/netgrif/application/engine/workflow/service/MenuImportExportService.javaapplication-engine/src/main/java/com/netgrif/application/engine/workflow/service/DataService.javaapplication-engine/src/main/java/com/netgrif/application/engine/menu/services/MenuItemService.javaapplication-engine/src/test/groovy/com/netgrif/application/engine/action/MenuItemApiTest.groovy
📚 Learning: 2025-10-20T11:46:37.958Z
Learnt from: renczesstefan
Repo: netgrif/application-engine PR: 373
File: application-engine/src/main/java/com/netgrif/application/engine/actions/ActionApiImpl.java:105-107
Timestamp: 2025-10-20T11:46:37.958Z
Learning: In ActionApiImpl, the processIdentifier parameter in searchCases() is intentionally unused because it's required by the ActionApi interface for plugin implementations. This implementation returns cases from all processes without filtering by processIdentifier.
Applied to files:
application-engine/src/main/java/com/netgrif/application/engine/menu/services/DashboardItemServiceImpl.javaapplication-engine/src/main/java/com/netgrif/application/engine/menu/services/DashboardManagementServiceImpl.javaapplication-engine/src/main/java/com/netgrif/application/engine/workflow/service/CaseSearchService.java
📚 Learning: 2025-09-29T10:31:31.469Z
Learnt from: renczesstefan
Repo: netgrif/application-engine PR: 362
File: application-engine/src/main/java/com/netgrif/application/engine/petrinet/web/ProcessRoleController.java:43-45
Timestamp: 2025-09-29T10:31:31.469Z
Learning: In the Netgrif application engine, when Authentication objects reach controller endpoints, auth.getPrincipal() always returns a LoggedUser instance and is never null, so defensive casting checks are not necessary in controller methods.
Applied to files:
application-engine/src/main/java/com/netgrif/application/engine/auth/web/UserControllerAdvice.javaapplication-engine/src/main/java/com/netgrif/application/engine/configuration/security/ImpersonationRequestFilter.javaapplication-engine/src/main/java/com/netgrif/application/engine/workflow/service/WorkflowAuthorizationService.javaapplication-engine/src/main/java/com/netgrif/application/engine/workflow/service/interfaces/ITaskService.javaapplication-engine/src/main/java/com/netgrif/application/engine/workflow/service/TaskAuthorizationService.javaapplication-engine/src/main/java/com/netgrif/application/engine/workflow/service/TaskService.java
📚 Learning: 2025-08-19T20:07:15.621Z
Learnt from: renczesstefan
Repo: netgrif/application-engine PR: 339
File: application-engine/src/test/groovy/com/netgrif/application/engine/filters/FilterImportExportTest.groovy:341-341
Timestamp: 2025-08-19T20:07:15.621Z
Learning: In the Elasticsearch migration, the stringId property was removed from ElasticCase and ElasticTask, with the id property now containing the MongoDB case/task object ID directly. This consolidation eliminates redundancy and simplifies the data model.
Applied to files:
application-engine/src/main/java/com/netgrif/application/engine/startup/runner/DefaultFiltersRunner.javaapplication-engine/src/main/java/com/netgrif/application/engine/elastic/service/ReindexingTask.javaapplication-engine/src/main/java/com/netgrif/application/engine/workflow/service/DataService.javaapplication-engine/src/test/groovy/com/netgrif/application/engine/elastic/ElasticTaskTest.groovyapplication-engine/src/main/java/com/netgrif/application/engine/elastic/service/ElasticCaseService.javaapplication-engine/src/main/java/com/netgrif/application/engine/elastic/service/ElasticCaseMappingService.javaapplication-engine/src/test/groovy/com/netgrif/application/engine/petrinet/domain/dataset/ChangeCasePropertyTest.groovy
📚 Learning: 2025-07-31T08:05:21.587Z
Learnt from: renczesstefan
Repo: netgrif/application-engine PR: 329
File: nae-user-ce/src/main/java/com/netgrif/application/engine/auth/service/RealmServiceImpl.java:39-39
Timestamp: 2025-07-31T08:05:21.587Z
Learning: In the Netgrif Application Engine, the domain Realm class (com.netgrif.application.engine.objects.auth.domain.Realm) is abstract and cannot be instantiated. The concrete implementation is in the adapter package (com.netgrif.application.engine.adapter.spring.auth.domain.Realm) which extends the abstract domain class. Services must instantiate the concrete adapter class and cast it when saving to repositories that accept the abstract domain type.
Applied to files:
application-engine/src/main/java/com/netgrif/application/engine/workflow/service/WorkflowAuthorizationService.javaapplication-engine/src/main/java/com/netgrif/application/engine/workflow/service/TaskAuthorizationService.javaapplication-engine/src/test/groovy/com/netgrif/application/engine/action/AssignActionTest.groovy
📚 Learning: 2025-09-29T10:31:57.325Z
Learnt from: renczesstefan
Repo: netgrif/application-engine PR: 362
File: application-engine/src/main/java/com/netgrif/application/engine/petrinet/service/ProcessRoleService.java:513-529
Timestamp: 2025-09-29T10:31:57.325Z
Learning: PetriNet.getStringId() returns a simple ObjectId string representation (_id.toString()), not a composite Netgrif ID format, so new ObjectId(petriNetId) works correctly when petriNetId comes from PetriNet.getStringId().
Applied to files:
application-engine/src/test/groovy/com/netgrif/application/engine/petrinet/domain/dataset/FileListFieldTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/petrinet/domain/dataset/FileFieldTest.groovyapplication-engine/src/main/java/com/netgrif/application/engine/petrinet/service/PetriNetService.javaapplication-engine/src/main/java/com/netgrif/application/engine/workflow/service/TaskService.java
📚 Learning: 2025-09-04T11:09:31.264Z
Learnt from: renczesstefan
Repo: netgrif/application-engine PR: 350
File: application-engine/src/main/java/com/netgrif/application/engine/startup/runner/SuperCreatorRunner.java:56-63
Timestamp: 2025-09-04T11:09:31.264Z
Learning: In SuperCreatorRunner.java, when creating a user with PasswordCredential via setCredential("password", passwordCredential), there's no need to also call setPassword() as it would be redundant - the PasswordCredential already contains the password information needed by UserServiceImpl.createUser().
Applied to files:
application-engine/src/main/java/com/netgrif/application/engine/auth/service/RegistrationService.java
📚 Learning: 2025-08-19T20:13:40.087Z
Learnt from: renczesstefan
Repo: netgrif/application-engine PR: 339
File: nae-object-library/src/main/java/com/netgrif/application/engine/objects/elastic/domain/CaseField.java:16-16
Timestamp: 2025-08-19T20:13:40.087Z
Learning: In CaseField.java, fulltextValue is mapped as a keyword field type in Elasticsearch (for exact matches, filtering, aggregations), while the separate caseValue field serves different Elasticsearch query requirements, allowing the system to support multiple query patterns on the same data through different field mappings.
Applied to files:
application-engine/src/main/java/com/netgrif/application/engine/elastic/service/ElasticCaseMappingService.java
📚 Learning: 2025-08-19T20:07:43.748Z
Learnt from: renczesstefan
Repo: netgrif/application-engine PR: 339
File: nae-object-library/src/main/java/com/netgrif/application/engine/objects/elastic/domain/CaseField.java:16-16
Timestamp: 2025-08-19T20:07:43.748Z
Learning: In CaseField.java, the separate caseValue field (List<String>) is intentionally maintained alongside fulltextValue for specific Elasticsearch query requirements, rather than being derived on-the-fly from fulltextValue.
Applied to files:
application-engine/src/main/java/com/netgrif/application/engine/elastic/service/ElasticCaseMappingService.java
🧬 Code graph analysis (13)
application-engine/src/main/java/com/netgrif/application/engine/workflow/service/FilterImportExportService.java (1)
nae-object-library/src/main/java/com/netgrif/application/engine/objects/auth/domain/ActorTransformer.java (1)
ActorTransformer(10-131)
application-engine/src/main/java/com/netgrif/application/engine/petrinet/params/ImportPetriNetParams.java (3)
application-engine/src/main/java/com/netgrif/application/engine/petrinet/params/DeletePetriNetParams.java (1)
Data(12-25)application-engine/src/main/java/com/netgrif/application/engine/workflow/params/DeleteCaseParams.java (1)
Data(15-55)application-engine/src/main/java/com/netgrif/application/engine/workflow/params/TaskParams.java (1)
Data(17-70)
application-engine/src/main/java/com/netgrif/application/engine/workflow/params/CreateCaseParams.java (4)
application-engine/src/main/java/com/netgrif/application/engine/petrinet/params/DeletePetriNetParams.java (1)
Data(12-25)application-engine/src/main/java/com/netgrif/application/engine/petrinet/params/ImportPetriNetParams.java (1)
Data(17-51)application-engine/src/main/java/com/netgrif/application/engine/workflow/params/DelegateTaskParams.java (1)
Data(17-45)application-engine/src/main/java/com/netgrif/application/engine/workflow/params/DeleteCaseParams.java (1)
Data(15-55)
application-engine/src/main/java/com/netgrif/application/engine/workflow/params/DeleteCaseParams.java (3)
application-engine/src/main/java/com/netgrif/application/engine/petrinet/params/DeletePetriNetParams.java (1)
Data(12-25)application-engine/src/main/java/com/netgrif/application/engine/workflow/params/DelegateTaskParams.java (1)
Data(17-45)application-engine/src/main/java/com/netgrif/application/engine/workflow/params/TaskParams.java (1)
Data(17-70)
application-engine/src/main/java/com/netgrif/application/engine/workflow/service/MenuImportExportService.java (1)
nae-object-library/src/main/java/com/netgrif/application/engine/objects/auth/domain/ActorTransformer.java (1)
ActorTransformer(10-131)
application-engine/src/main/java/com/netgrif/application/engine/petrinet/params/DeletePetriNetParams.java (1)
application-engine/src/main/java/com/netgrif/application/engine/workflow/params/DeleteCaseParams.java (1)
Data(15-55)
application-engine/src/main/java/com/netgrif/application/engine/startup/runner/DefaultFiltersRunner.java (1)
nae-object-library/src/main/java/com/netgrif/application/engine/objects/auth/domain/ActorTransformer.java (1)
ActorTransformer(10-131)
application-engine/src/main/java/com/netgrif/application/engine/workflow/params/TaskParams.java (3)
application-engine/src/main/java/com/netgrif/application/engine/workflow/params/CreateCaseParams.java (1)
Data(19-70)application-engine/src/main/java/com/netgrif/application/engine/workflow/params/DelegateTaskParams.java (1)
Data(17-45)application-engine/src/main/java/com/netgrif/application/engine/workflow/params/DeleteCaseParams.java (1)
Data(15-55)
application-engine/src/main/java/com/netgrif/application/engine/petrinet/web/PetriNetController.java (1)
application-engine/src/main/java/com/netgrif/application/engine/workflow/web/responsebodies/MessageResource.java (1)
MessageResource(10-31)
application-engine/src/main/java/com/netgrif/application/engine/workflow/params/DelegateTaskParams.java (2)
application-engine/src/main/java/com/netgrif/application/engine/workflow/params/DeleteCaseParams.java (1)
Data(15-55)application-engine/src/main/java/com/netgrif/application/engine/workflow/params/TaskParams.java (1)
Data(17-70)
application-engine/src/main/java/com/netgrif/application/engine/workflow/service/WorkflowService.java (1)
nae-object-library/src/main/java/com/netgrif/application/engine/objects/auth/domain/ActorTransformer.java (1)
ActorTransformer(10-131)
application-engine/src/main/java/com/netgrif/application/engine/workflow/web/WorkflowController.java (1)
application-engine/src/main/java/com/netgrif/application/engine/workflow/web/responsebodies/MessageResource.java (1)
MessageResource(10-31)
application-engine/src/main/java/com/netgrif/application/engine/petrinet/service/PetriNetService.java (1)
nae-object-library/src/main/java/com/netgrif/application/engine/objects/auth/domain/ActorTransformer.java (1)
ActorTransformer(10-131)
⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (6)
- GitHub Check: Test
- GitHub Check: task-list-completed
- GitHub Check: task-list-completed
- GitHub Check: task-list-completed
- GitHub Check: task-list-completed
- GitHub Check: task-list-completed
...ation-engine/src/main/groovy/com/netgrif/application/engine/migration/ActionMigration.groovy
Outdated
Show resolved
Hide resolved
...e/src/main/groovy/com/netgrif/application/engine/validation/service/ValidationService.groovy
Show resolved
Hide resolved
...on-engine/src/main/java/com/netgrif/application/engine/auth/service/RegistrationService.java
Outdated
Show resolved
Hide resolved
...on-engine/src/main/java/com/netgrif/application/engine/auth/service/RegistrationService.java
Outdated
Show resolved
Hide resolved
...n/java/com/netgrif/application/engine/configuration/security/ImpersonationRequestFilter.java
Show resolved
Hide resolved
...cation-engine/src/main/java/com/netgrif/application/engine/workflow/service/TaskService.java
Show resolved
Hide resolved
...ion-engine/src/main/java/com/netgrif/application/engine/workflow/web/WorkflowController.java
Show resolved
Hide resolved
...n-engine/src/test/groovy/com/netgrif/application/engine/elastic/DataSearchRequestTest.groovy
Outdated
Show resolved
Hide resolved
...test/groovy/com/netgrif/application/engine/petrinet/domain/dataset/DynamicChoicesTest.groovy
Outdated
Show resolved
Hide resolved
...on-engine/src/test/groovy/com/netgrif/application/engine/workflow/SetDataOnButtonTest.groovy
Outdated
Show resolved
Hide resolved
- fix possible leak with try-with-resources
- fix incorrect counter in a log message
- change logging level info
- add stack trace in an error message
- remove token from log messages to reduce security risk
- override builder methods in DelegateTaskParams
- fix stale useCase problem
- improve consistency in WorkflowController
- fix possible input stream leak in test files
There was a problem hiding this comment.
Actionable comments posted: 3
♻️ Duplicate comments (1)
application-engine/src/main/java/com/netgrif/application/engine/auth/service/RegistrationService.java (1)
101-101: Token exposure in logs remains a concern.The full token value is still logged, which poses a security risk if logs are accessed by unauthorized parties. While this is now at DEBUG level (typically disabled in production), consider logging only a partial hash or omitting the token entirely.
Note: This concern was previously raised and only the logging syntax was modernized in this change.
📜 Review details
Configuration used: CodeRabbit UI
Review profile: ASSERTIVE
Plan: Pro
📒 Files selected for processing (10)
application-engine/src/main/groovy/com/netgrif/application/engine/migration/ActionMigration.groovy(2 hunks)application-engine/src/main/java/com/netgrif/application/engine/auth/service/RegistrationService.java(6 hunks)application-engine/src/main/java/com/netgrif/application/engine/elastic/service/ElasticTaskQueueManager.java(1 hunks)application-engine/src/main/java/com/netgrif/application/engine/mail/MailService.java(3 hunks)application-engine/src/main/java/com/netgrif/application/engine/workflow/params/DelegateTaskParams.java(1 hunks)application-engine/src/main/java/com/netgrif/application/engine/workflow/service/TaskService.java(20 hunks)application-engine/src/main/java/com/netgrif/application/engine/workflow/web/WorkflowController.java(4 hunks)application-engine/src/test/groovy/com/netgrif/application/engine/elastic/DataSearchRequestTest.groovy(2 hunks)application-engine/src/test/groovy/com/netgrif/application/engine/petrinet/domain/dataset/DynamicChoicesTest.groovy(2 hunks)application-engine/src/test/groovy/com/netgrif/application/engine/workflow/SetDataOnButtonTest.groovy(3 hunks)
🧰 Additional context used
🧠 Learnings (12)
📓 Common learnings
Learnt from: Retoocs
Repo: netgrif/application-engine PR: 383
File: application-engine/src/main/java/com/netgrif/application/engine/startup/ApplicationRunnerOrderResolver.java:43-43
Timestamp: 2025-11-14T10:22:01.624Z
Learning: For the netgrif/application-engine repository, avoid flagging trivial or nitpick-level issues such as redundant null checks, minor code style improvements, or obvious simplifications that don't affect functionality or introduce bugs. Focus review comments on substantive issues like logic errors, security concerns, performance problems, or breaking changes.
📚 Learning: 2025-07-31T23:40:46.499Z
Learnt from: tuplle
Repo: netgrif/application-engine PR: 334
File: application-engine/src/main/java/com/netgrif/application/engine/petrinet/service/PetriNetService.java:204-214
Timestamp: 2025-07-31T23:40:46.499Z
Learning: In the PetriNetService.importPetriNet method, existingNet.getVersion() cannot be null because all existing nets in the system were deployed through processes that ensure every net always has a version assigned.
Applied to files:
application-engine/src/main/groovy/com/netgrif/application/engine/migration/ActionMigration.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/workflow/SetDataOnButtonTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/petrinet/domain/dataset/DynamicChoicesTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/elastic/DataSearchRequestTest.groovy
📚 Learning: 2025-09-05T10:21:54.893Z
Learnt from: renczesstefan
Repo: netgrif/application-engine PR: 350
File: application-engine/src/test/groovy/com/netgrif/application/engine/export/service/ExportServiceTest.groovy:135-135
Timestamp: 2025-09-05T10:21:54.893Z
Learning: In ExportServiceTest.groovy, writing to src/test/resources is intentional to simulate production behavior where the working tree is mutated during file exports. This mirrors how the system works in production.
Applied to files:
application-engine/src/test/groovy/com/netgrif/application/engine/workflow/SetDataOnButtonTest.groovyapplication-engine/src/test/groovy/com/netgrif/application/engine/elastic/DataSearchRequestTest.groovy
📚 Learning: 2025-07-29T17:19:18.300Z
Learnt from: tuplle
Repo: netgrif/application-engine PR: 331
File: application-engine/src/main/java/com/netgrif/application/engine/elastic/service/ElasticPetriNetService.java:45-46
Timestamp: 2025-07-29T17:19:18.300Z
Learning: In ElasticPetriNetService class, petriNetService is properly initialized using Lazy setter injection rather than constructor injection. This pattern with Lazy Autowired setter methods is commonly used in Spring to resolve circular dependencies and is a valid alternative to constructor injection.
Applied to files:
application-engine/src/test/groovy/com/netgrif/application/engine/workflow/SetDataOnButtonTest.groovy
📚 Learning: 2025-08-20T07:27:02.660Z
Learnt from: renczesstefan
Repo: netgrif/application-engine PR: 339
File: application-engine/src/main/java/com/netgrif/application/engine/elastic/service/ElasticTaskQueueManager.java:38-45
Timestamp: 2025-08-20T07:27:02.660Z
Learning: When reviewing ElasticTaskQueueManager changes, task.getTask().getId() returns the document identifier while task.getTaskId() returns the business task identifier. The queue operations should use consistent identifiers throughout the lifecycle (scheduling, processing, cleanup).
Applied to files:
application-engine/src/main/java/com/netgrif/application/engine/elastic/service/ElasticTaskQueueManager.javaapplication-engine/src/main/java/com/netgrif/application/engine/workflow/params/DelegateTaskParams.javaapplication-engine/src/main/java/com/netgrif/application/engine/workflow/service/TaskService.java
📚 Learning: 2025-10-20T11:44:44.907Z
Learnt from: machacjozef
Repo: netgrif/application-engine PR: 367
File: application-engine/src/main/resources/application.yaml:24-24
Timestamp: 2025-10-20T11:44:44.907Z
Learning: In the netgrif/application-engine project, the correction of the Elasticsearch task index name from "_taks" to "_task" in application.yaml was approved by maintainer machacjozef, indicating that any data migration concerns for this typo fix are handled separately or not applicable to their deployment scenario.
Applied to files:
application-engine/src/main/java/com/netgrif/application/engine/elastic/service/ElasticTaskQueueManager.javaapplication-engine/src/main/java/com/netgrif/application/engine/workflow/service/TaskService.java
📚 Learning: 2025-11-07T13:11:20.622Z
Learnt from: renczesstefan
Repo: netgrif/application-engine PR: 378
File: application-engine/src/main/java/com/netgrif/application/engine/elastic/service/ElasticQueueManager.java:145-149
Timestamp: 2025-11-07T13:11:20.622Z
Learning: In the netgrif/application-engine project, failed Elasticsearch bulk operations in ElasticQueueManager should not be retried or re-queued within the flush() method. The system relies on scheduled reindexing and manual reindex endpoints as fallback mechanisms for failed operations, making in-method retries unnecessary and potentially problematic (could cause deadlocks, capacity issues, or infinite loops with bad data).
Applied to files:
application-engine/src/main/java/com/netgrif/application/engine/elastic/service/ElasticTaskQueueManager.java
📚 Learning: 2025-11-14T09:31:48.833Z
Learnt from: Retoocs
Repo: netgrif/application-engine PR: 383
File: application-engine/src/main/java/com/netgrif/application/engine/configuration/security/ImpersonationRequestFilter.java:87-87
Timestamp: 2025-11-14T09:31:48.833Z
Learning: In the ImpersonationRequestFilter.java file within the security configuration, logging the full principal object (including its toString() representation) in the warn statement when a non-LoggedUser principal is encountered is acceptable, even though it may include PII. The team prefers the additional debugging context over restricting the log to just the class name.
Applied to files:
application-engine/src/main/java/com/netgrif/application/engine/auth/service/RegistrationService.java
📚 Learning: 2025-09-04T11:09:31.264Z
Learnt from: renczesstefan
Repo: netgrif/application-engine PR: 350
File: application-engine/src/main/java/com/netgrif/application/engine/startup/runner/SuperCreatorRunner.java:56-63
Timestamp: 2025-09-04T11:09:31.264Z
Learning: In SuperCreatorRunner.java, when creating a user with PasswordCredential via setCredential("password", passwordCredential), there's no need to also call setPassword() as it would be redundant - the PasswordCredential already contains the password information needed by UserServiceImpl.createUser().
Applied to files:
application-engine/src/main/java/com/netgrif/application/engine/auth/service/RegistrationService.java
📚 Learning: 2025-09-05T10:17:28.577Z
Learnt from: renczesstefan
Repo: netgrif/application-engine PR: 350
File: application-engine/src/test/groovy/com/netgrif/application/engine/export/service/ExportServiceTest.groovy:82-82
Timestamp: 2025-09-05T10:17:28.577Z
Learning: In the application-engine test suite, testHelper.truncateDbs() follows a two-phase approach: first it clears the databases, then it executes superCreator to create the admin user. This means Optional.get() is safe when retrieving the admin user after truncateDbs() because the admin user is guaranteed to exist.
Applied to files:
application-engine/src/test/groovy/com/netgrif/application/engine/elastic/DataSearchRequestTest.groovy
📚 Learning: 2025-09-29T10:31:31.469Z
Learnt from: renczesstefan
Repo: netgrif/application-engine PR: 362
File: application-engine/src/main/java/com/netgrif/application/engine/petrinet/web/ProcessRoleController.java:43-45
Timestamp: 2025-09-29T10:31:31.469Z
Learning: In the Netgrif application engine, when Authentication objects reach controller endpoints, auth.getPrincipal() always returns a LoggedUser instance and is never null, so defensive casting checks are not necessary in controller methods.
Applied to files:
application-engine/src/main/java/com/netgrif/application/engine/workflow/service/TaskService.java
📚 Learning: 2025-09-29T10:31:57.325Z
Learnt from: renczesstefan
Repo: netgrif/application-engine PR: 362
File: application-engine/src/main/java/com/netgrif/application/engine/petrinet/service/ProcessRoleService.java:513-529
Timestamp: 2025-09-29T10:31:57.325Z
Learning: PetriNet.getStringId() returns a simple ObjectId string representation (_id.toString()), not a composite Netgrif ID format, so new ObjectId(petriNetId) works correctly when petriNetId comes from PetriNet.getStringId().
Applied to files:
application-engine/src/main/java/com/netgrif/application/engine/workflow/service/TaskService.java
🧬 Code graph analysis (2)
application-engine/src/main/java/com/netgrif/application/engine/workflow/web/WorkflowController.java (1)
application-engine/src/main/java/com/netgrif/application/engine/workflow/web/responsebodies/MessageResource.java (1)
MessageResource(10-31)
application-engine/src/main/java/com/netgrif/application/engine/workflow/params/DelegateTaskParams.java (2)
application-engine/src/main/java/com/netgrif/application/engine/workflow/params/TaskParams.java (1)
Data(17-70)application-engine/src/main/java/com/netgrif/application/engine/workflow/params/DeleteCaseParams.java (1)
Data(15-55)
⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (13)
- GitHub Check: Test
- GitHub Check: task-list-completed
- GitHub Check: task-list-completed
- GitHub Check: task-list-completed
- GitHub Check: task-list-completed
- GitHub Check: task-list-completed
- GitHub Check: task-list-completed
- GitHub Check: task-list-completed
- GitHub Check: task-list-completed
- GitHub Check: task-list-completed
- GitHub Check: task-list-completed
- GitHub Check: task-list-completed
- GitHub Check: task-list-completed
🔇 Additional comments (23)
application-engine/src/main/java/com/netgrif/application/engine/elastic/service/ElasticTaskQueueManager.java (1)
59-59: Previous feedback addressed - logging improvement looks good.The parameterized logging with the exception object as the third parameter is now correctly implemented. This ensures both the error message and full stack trace are captured, which improves debuggability while maintaining efficient logging performance.
application-engine/src/test/groovy/com/netgrif/application/engine/workflow/SetDataOnButtonTest.groovy (2)
72-78: Excellent fix for the resource leak!The use of
.withCloseable(Groovy's try-with-resources equivalent) ensures theFileInputStreamis properly closed after use, directly addressing the resource leak concern from the previous review. TheImportPetriNetParamsbuilder is correctly configured with all required parameters.
94-95: LGTM: Consistent with PR's parameter-object refactoring.The migration to
TaskParamsforassignTaskandfinishTaskoperations aligns with the PR's objective to consolidate method overloads into builder-style parameter objects. The usage is straightforward and correct.application-engine/src/test/groovy/com/netgrif/application/engine/elastic/DataSearchRequestTest.groovy (2)
5-5: LGTM: Import updates support the API refactoring.The import changes appropriately add the necessary types (Case, Task, ImportPetriNetParams) and consolidate dataset imports with a wildcard, which is acceptable in test files.
Also applies to: 12-15
96-103: Excellent: Resource leak fixed and builder pattern adopted correctly.The refactoring properly addresses the previous resource leak concern by wrapping the FileInputStream in Groovy's
withCloseable, ensuring the stream is always closed. The migration toImportPetriNetParamsbuilder pattern is implemented correctly and aligns with the project-wide API standardization described in the PR objectives.application-engine/src/test/groovy/com/netgrif/application/engine/petrinet/domain/dataset/DynamicChoicesTest.groovy (2)
5-5: Import ofImportPetriNetParamsmatches the new parameter-object API.The new import is consistent with the refactor towards builder-style params and keeps this test aligned with the updated
IPetriNetServiceAPI.
54-63: Resource handling and import parameterization look correct.Using
FileInputStream(...).withCloseable {}ensures the stream is closed, and theImportPetriNetParamsbuilder correctly mirrors the previous(InputStream, VersionType, User)call. The explicitassert optNet.getNet() != nullbefore usingoptNetis also sound.application-engine/src/main/java/com/netgrif/application/engine/auth/service/RegistrationService.java (2)
69-69: LGTM! Correct fix for total count tracking.The
totalResetcounter properly accumulates the count across all pagination iterations, and the final log message now reports the accurate total number of expired tokens reset.Also applies to: 82-82, 87-87
95-95: LGTM! Parameterized logging improves code quality.The migration to SLF4J parameterized logging is a best practice that improves performance by avoiding unnecessary string concatenation when the log level is disabled.
Also applies to: 133-133, 138-138, 164-164, 183-183, 187-187, 200-200
application-engine/src/main/groovy/com/netgrif/application/engine/migration/ActionMigration.groovy (2)
7-7: LGTM! Resource leak fixed and parameter builder adopted.The try-with-resources pattern ensures the InputStream is properly closed, addressing the resource leak concern from the previous review. The migration to
ImportPetriNetParamsaligns with the PR's goal of standardizing service calls with parameter-builder objects.Also applies to: 28-33
60-60: LGTM! Appropriate use of static modifiers.Converting
migrateDataSetActionsandmigrateDataRefActionsto static methods is appropriate since they operate only on their parameters without requiring instance state. This improves clarity and follows best practices.Also applies to: 68-68
application-engine/src/main/java/com/netgrif/application/engine/workflow/params/DelegateTaskParams.java (1)
46-73: LGTM! Custom builder methods properly synchronize entity and ID fields.The custom builder methods correctly mirror the pattern established in TaskParams and DeleteCaseParams, ensuring that setting an entity (task, newAssignee, delegator) automatically populates the corresponding ID field. The null-safety checks prevent NPEs when calling getStringId().
application-engine/src/main/java/com/netgrif/application/engine/workflow/service/TaskService.java (7)
132-159: LGTM! TaskParams pattern cleanly consolidates method parameters.The refactor to TaskParams provides a cleaner API and the automatic attribute population via fillAndValidateAttributes (line 133) reduces boilerplate at call sites. The consistent extraction pattern and proper event/action flow are well-structured.
344-388: LGTM! fillAndValidateAttributes helpers intelligently populate missing attributes.Both overloads follow a sound sequence: resolve task first, then useCase (which depends on task), then users. The DelegateTaskParams version properly validates that newAssignee can be resolved (lines 379-386) and throws informative exceptions when requirements aren't met.
492-551: LGTM! reloadTasks refactor adds valuable lazy-save optimization.The new ReloadTaskOutcome return type provides callers with visibility into whether tasks were executed and whether the case was saved. The lazyCaseSave flag (line 492) allows callers to defer expensive save operations until necessary, and the logic correctly ensures the case is saved before executing auto-triggered tasks (lines 543-546).
627-655: LGTM! validateData improvements enhance error messaging and clarity.Separating field and dataField retrieval (lines 629-630) improves readability, and the enhanced error messages (lines 642, 644, 649, 651) that include field names when available will significantly aid debugging validation failures.
814-816: LGTM! Early returns avoid unnecessary repository operations.These guard clauses prevent saveAll/deleteAll calls on empty lists, eliminating unnecessary round-trips to MongoDB and Elasticsearch. Simple but effective optimization aligned with the PR's efficiency goals.
Also applies to: 950-952
833-853: LGTM! AtomicBoolean tracking minimizes unnecessary task saves.The isTaskModified flag (line 833) ensures the task is persisted only when user references actually change (lines 840, 843, 847), avoiding wasteful save operations when resolveUserRef doesn't modify state. Good optimization.
390-409: LGTM! returnTokens now returns Case for better composability.Changing the return type from void to Case (line 390) enables method chaining and functional composition, and the implementation correctly returns the saved case (line 408).
application-engine/src/main/java/com/netgrif/application/engine/workflow/web/WorkflowController.java (4)
89-95: LGTM! CreateCaseParams builder consolidates case creation parameters.The refactor to CreateCaseParams.with() provides a cleaner, more maintainable API and aligns with the parameter-object pattern adopted across the workflow services.
190-190: LGTM! URL decoding now uses the modern Charset overload consistently.Both calls now use
URLDecoder.decode(caseId, StandardCharsets.UTF_8)instead of the older.name()variant, eliminating the need to handle UnsupportedEncodingException and making the code cleaner.Also applies to: 220-220
225-227: LGTM! DeleteCaseParams builder consolidates deletion parameters.Consistent with the CreateCaseParams pattern and the broader parameter-object refactor across the codebase.
196-196: LGTM! Logging now uses SLF4J parameterized messages.The placeholder-based formatting (
log.error("... [{}] failed:", caseId, e)) is more efficient than string concatenation and follows SLF4J best practices.Also applies to: 232-232
...ation-engine/src/main/groovy/com/netgrif/application/engine/migration/ActionMigration.groovy
Outdated
Show resolved
Hide resolved
application-engine/src/main/java/com/netgrif/application/engine/mail/MailService.java
Show resolved
Hide resolved
application-engine/src/main/java/com/netgrif/application/engine/mail/MailService.java
Show resolved
Hide resolved
- fix ActionMigration.migrateActions to fail on every successful import
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Description
Implements NAE-2235
Dependencies
No new dependencies were introduced
Third party dependencies
No new dependencies were introduced
Blocking Pull requests
There are no dependencies on other PR
How Has Been This Tested?
By unit tests and manually
Test Configuration
Checklist:
Summary by CodeRabbit
Refactor
Bug Fixes
Style