Return early from an elapse-time-expense BCS handling
Functional scenario: from UI context, check the user input via serverside business validation, and if functional correct propagate the same user input for processing in the business backend.
In this scenario, the user needs only to wait for the period of the validation step; if the outcome reports functional errors these must be reported to the user so (s)he is able to correct. In case of no errors, the subsequent business processing can be performed transparent to the user, no need to explicitly wait / block until this (potential time-expensive) processing is completed in the backend.
Technical context: HTML5/JavaScript client, that interopates with SAP business backend via a SharePoint RESTful services, which internally utilizes SharePoint BCS to invoke Duet Enterprise / Gateway services.
Inconvenient operating BCS from background thread
Initially, I thought it would be simple to realize the sketched execution context: handle the first step on the main thread of the SharePoint WCF REST service; if errors detected report these back; if no errors noticed, delegate the elapse-time expense propagation step to a background thread, and directly return from the main thread to unlock the client.However, SharePoint / BCS reality proofed less trivial…
In my first attempt, I directly interoperate against BCS on the background thread:
main thread:
PerformCreation job = new PerformCreation()
{
_createMethod = createMethod,
_jsonBody = jsonBody,
_siteId = SPContext.Current.Site.ID,
_userToken = SPContext.Current.Site.UserToken
};
Thread backgroundThread = new Thread(new ThreadStart(job.PerformCreate));
backgroundThread.Start();
background thread:
public void PerformCreate()
{
using (SPSite site = new SPSite(_siteId, _userToken))
{
BCSModuleCall.Create(site, _createMethod, _jsonBody);
}
}
When I executed this, the BCS Create invocation faults with a ‘Cannot complete this action’ exception. This orginates from the BCS internal method call ‘CalculatePermissionsForCurrentThread’, that checks whether in the context of the executing thread, the user has the rights to perform the BCS operation. Via code reverse engineering, I detected that the 'Microsoft.SharePoint.BusinessData.Infrastructure. BdcAccessControlList.AccessCheck(BdcRights rights)' method requires an active SPRequest context. And that only lives on the main / SharePoint thread.
To arrange that the BCS Create method is executed within the context of an active SPRequest, in my second attempt I changed the code to serverside issue from the background thread a webrequest to the SharePoint REST service. Although this technically works (that is, the ‘CalculatePermissionsForCurrentThread’ succeeds and the BCS Create operation is successful performed), a drawback is that you loose the credentials of the logged-on SharePoint user. It is not possible to propagate the claims-authenticated identity of the logged-on user to the webrequest invoked via WebClient class. It always authenticates and thus executes with the Application Pool identity.
public void PerformCreate()
{
var claimIdentity = (Microsoft.IdentityModel.Claims.ClaimsIdentity)
Thread.CurrentPrincipal.Identity;
var upnClaim = claimIdentity.Claims.FirstOrDefault(
c => c.ClaimType.Equals(Microsoft.IdentityModel.Claims.ClaimTypes.Upn,
StringComparison.InvariantCultureIgnoreCase));
if (upnClaim != null)
{
string upn = upnClaim.Value;
WindowsIdentity windowsIdentity =
Microsoft.IdentityModel.WindowsTokenService.S4UClient.UpnLogon(upn);
var wic = windowsIdentity.Impersonate();
try
{
// SharePoint BCS API requires a current SPContext. In this thread,
// there is no SPContext. To make sure the create is executed within
// a current SPContext, create the entities by issuing REST request.
WebClient webClient = new WebClient()
{
UseDefaultCredentials = true,
BaseAddress = _baseAddress
};
webClient.Headers.Add(HttpRequestHeader.ContentType,
"application/json;charset=utf-8");
webClient.UploadDataAsync(
(new Uri(String.Format("{0}/CreateItems", _baseAddress))),
"POST",
Encoding.UTF8.GetBytes(_jsonBody));
}
finally
{
wic.Undo();
}
}
}
In our scenario, it is a necessity that all data updates are authorized and audited for the issueing user. So although technical it is possible to delegate in this manner the BCS data update to a serverside background thread, from the perspective of data governance it is not allowed.
Solution: client-side operate BCS in asynchronous mode
Ultimately, I skipped the approach of serverside splitting up the BCS invocation in a synchronous blocking part, and an asynchronous non-blocking part, and instead decided to manage this from client-side. At first, issue a REST JSON request for the data validation; and let the user wait (block) on the response. If no validation errors detected, issue from the browser with the same JSON object the second update request in a fire-and-forget behaviour.
var checkUrl = bindingContext.$root.siteUrl +
"/_vti_bin/WebApi/BCSAccessService.svc/CheckItems";
var checkCall = jQuery.ajax({
url: checkUrl,
type: "POST",
data: JSON.stringify(json),
success: function (data) {
if (Utilities.CheckNoErrorInResponse(data.BODY.ET_MESSAGES)) {
var submitUrl = bindingContext.$root.siteUrl +
"/_vti_bin/WebApi/BCSAccessService.svc/CreateItems";
// Data is already validated:
//Fire-and-forget ajax async request and ignore response.
var submitCall = jQuery.ajax({
url: submitUrl,
type: "POST",
data:JSON.stringify(json)});
alert("User input is validated and submitted.");
window.parent.jQuery('#dialogForm').dialog('close');
} else {
Utilities.DisplayResponseMessages(data.BODY.ET_MESSAGES);
}
}
}).fail(Utilities.ErrorHandler);
And this works out fine: the end-user earlier regains the input-control and responsiveness in the front-end application, while the update in the back-end is still processed in the background with the credentials of the logged-on user.
