added instructions for num dashboard report on dsf 2

Author: schwzr

docs/src/operations/v2.0.1/install-plugins.md

@@ -3,13 +3,9 @@ title: Install Plugins
 icon: plugin
 ---
 
-::: tip Marketplace for process plugins
-To install and learn more about each Process Plugin, you can visit the Marketplace [here](https://hub.dsf.dev).
-:::
-
 
 ## **Overview**
-- You can find an overview of compatable process plugins below (last updated 2025-11-25).
+- You can find an overview of compatable process plugins below (last updated 2026-01-19).
 
 
 | Process Plugin | released for test | released for production |
@@ -20,9 +16,8 @@ To install and learn more about each Process Plugin, you can visit the Marketpla
 | [MII Process Report](https://github.com/medizininformatik-initiative/mii-process-report/releases) | [v1.2.0.1](https://github.com/medizininformatik-initiative/mii-process-report/releases/tag/v1.2.0.1) | [v1.2.0.1](https://github.com/medizininformatik-initiative/mii-process-report/releases/tag/v1.2.0.1) |
 | [MII Process Data Transfer](https://github.com/medizininformatik-initiative/mii-process-data-transfer/releases) | [v1.1.0.1](https://github.com/medizininformatik-initiative/mii-process-data-transfer/releases/tag/v1.1.0.1) | [v1.1.0.1](https://github.com/medizininformatik-initiative/mii-process-data-transfer/releases/tag/v1.1.0.1) |
 | [MII Process Data Sharing](https://github.com/medizininformatik-initiative/mii-process-data-sharing/releases) | [v1.1.0.0](https://github.com/medizininformatik-initiative/mii-process-data-sharing/releases/tag/v1.1.0.0) | [v1.1.0.0](https://github.com/medizininformatik-initiative/mii-process-data-sharing/releases/tag/v1.1.0.0) |
+| [NUM Dashboard Report](https://github.com/medizininformatik-initiative/dsf-plugin-numdashboard/releases) [Note](#num-dashboard-report-on-dsf-2) | [v1.1.0.0](https://github.com/medizininformatik-initiative/dsf-plugin-numdashboard/releases/tag/v1.1.0.0) | [v1.1.0.0](https://github.com/medizininformatik-initiative/dsf-plugin-numdashboard/releases/tag/v1.1.0.0) |
 
-
-- Explore and install Process Plugins in the Marketplace. Details on each plugin are available [here](https://hub.dsf.dev/).
 - Deploying the process plugin to the DSF involves copy the process jar-file and configuring environment variable for the business process engine (BPE).
 
 
@@ -53,3 +48,88 @@ sudo chown root:bpe mii-process-data-sharing-1.1.0.0.jar
 
 - Modify the process exclude config in `/opt/bpe/docker-compose.yml`
 - **Reminder:** Update/verify required configurations in `docker-compose.yml`
+
+
+### NUM Dashboard Report on DSF 2
+The NUM Dashboard Report Plugin is not fully compatible with DSF 2.0.1 out of the box. DSF 2 introduced some new security features like class whitelisting of classes from the DSF and it's dependencies. The NUM Dashboard Report Plugin uses some of the not whitelisted classes. After review, it's fine to use the classes required by the plugin. Until new versions are released, you can allow the required classes with the following changes:
+
+1. Create a new file with the name `api-v1-allowed-bpe-classes.list` with the following content:
+
+```text
+#
+# Copyright 2018-2025 Heilbronn University of Applied Sciences
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+com.fasterxml.jackson.annotation
+com.fasterxml.jackson.core
+com.fasterxml.jackson.databind
+com.google.common
+dev.dsf.bpe.api
+jakarta.ws.rs
+org.apache.commons.codec
+org.apache.commons.io
+org.apache.commons.lang3
+org.apache.commons.text
+org.apache.http
+org.bouncycastle
+org.operaton.bpm.engine.delegate
+org.operaton.bpm.engine.impl.el.FixedValue
+org.operaton.bpm.engine.impl.util.ClassDelegateUtil
+org.operaton.bpm.engine.impl.variable.serializer
+org.operaton.bpm.engine.ProcessEngine
+org.operaton.bpm.engine.RuntimeService
+org.operaton.bpm.engine.variable
+org.operaton.bpm.model.bpmn.instance
+org.joda.time
+org.glassfish.jersey
+org.slf4j.Logger
+org.slf4j.LoggerFactory
+org.springframework.beans
+org.springframework.cglib
+org.springframework.context
+org.springframework.core
+org.springframework.lang
+org.springframework.util
+org.springframework.web.util.UriComponents
+org.springframework.web.util.UriComponentsBuilder
+org.w3c.dom
+org.xml.sax
+sun.misc.Unsafe
+# packages required for num dashboard report plugin
+org.springframework.web.client
+org.springframework.http
+```
+
+2. Edit the `docker-compose.yml` file and add the following:
+
+```yaml
+...
+  app:
+    image: ghcr.io/datasharingframework/bpe:2.0.1
+...
+    volumes:
+...
+      - type: bind
+        source: api-v1-allowed-bpe-classes.list
+        target: /api-v1-allowed-bpe-classes.list
+...
+    environment:
+      DEV_DSF_BPE_PROCESS_API_ALLOWED_BPE_CLASSES: "{v1: '/api-v1-allowed-bpe-classes.list'}"
+...
+```
+
+3. Restart the application container with `docker compose up -d && docker compose logs -f`.
+
+4. The process should work as intended.