Service Package form
Completing the Context tab

Field

Description

Select Stateless if the services in this package can be executed by any requestor in of a pool of requestors, without regard to processing that the requestor performed earlier. See More about Service Packages.

Select the default value Stateful otherwise.

Choose this value carefully. Using requestor session pooling may improve performance if a high volume of uniform requests arrive, even when authentication is required. See Concepts — How requestor pooling for services works.

Identify an access group for requestors of this service package.

Process Commander uses this access group, even for services that require authentication, to locate the service rule. The service rules and service activities to be executed must be accessible to requestors operating with this access group.

Especially if this service is to execute without authentication, set up an access group that provides only the minimum capabilities to service requestors and reference it here. For example, you can include an access role (Rule-Access-Role-Name rule type) linked to Access of Role to Object rules (Rule-Access-Role-Obj rule type) that limits which classes the service can view or update. Also, review the service activity to ensure that no combination of input parameters allows the activity to perform more than the service needs.

Click the pencil icon () to open the access group data instance.

Select if the service request requires authentication. When selected, the system expects Process Commander Operator ID and password values in the arriving request message.

When selected, authentication occurs only for the first request for stateful services that use pooling and don't destroy the requestor. Later service requests that include the Session ID in the request message continue with the same previously authenticated requestor session.

In high-volume production settings, authentication can be costly in terms of computer resources. However, unauthenticated service requestors can access the RuleSets and Versions conveyed by the access group in the Service Access Group field plus those assigned to the requestor type named APP. (Services run as APP requestors.) Depending on security and volume factors, for best performance you can leave the Requires Authentication? box cleared.

The location and name of the Operator ID and password values vary, depending on the service type:

Select to cause the system to skip over any activity step that calls the Show-HTML method in the service activities that execute through service rules that reference this service package instance.

This feature lets you reuse or share an activity that supports both interactive users and services.

After you save this form, click to view a tree of the components that comprise the package. See About the Integration viewer.