<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none"><!--P{margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr" style="font-size:12pt;color:#000000;background-color:#FFFFFF;font-family:Calibri,Arial,Helvetica,sans-serif;">
<p>Hi ,</p>
<p><br>
</p>
<p><br>
</p>
<p>I am trying to restrict a user to view only one Organisation Unit to which he is a member of.<br>
</p>
<font face="Calibri,Arial,Helvetica,sans-serif" size="3" color="black"><span style="font-size:12pt;background-color:white;" dir="ltr">
<div style="margin-top:0;margin-bottom:0;">I am able to get the full organisation tree for a user but not able to restrict the user to view one OU<br>
</div>
<div style="margin-top:0;margin-bottom:0;">I tried different permutations and combinations for restricting the view of a store user to one particular organisation unit.<br>
<br>
</div>
<div style="margin-top:0;margin-bottom:0;">Following is the script I tried to add in the role of that user:<br>
<br>
</div>
<div style="margin-top:0;margin-bottom:0;"><authorization id><br>
<decision>allow</decision><br>
<action>http://<span name="searchHitInReadingPane" id="0.14537967770091398" class="currentHitHighlight">midpoint</span>.evolveum.com/xml/ns/public/security/authorization-3#orgUnit</action><br>
<action>http://<span name="searchHitInReadingPane" id="0.7626521602031172" class="highlight">midpoint</span>.evolveum.com/xml/ns/public/security/authorization-3#orgTree</action><br>
<object><br>
<orgRef xmlns:tns="http://<span name="searchHitInReadingPane" id="0.9959391090158695" class="highlight">midpoint</span>.evolveum.com/xml/ns/public/common/common-3"<br>
oid="310f0079-4016-46e9-8a09-c9ed149a85a1"<br>
type="tns:OrgType"/><br>
</object><br>
</authorization><br>
<br>
Here oid=<font face="Calibri,Arial,Helvetica,sans-serif" size="3" color="black"><span style="font-size:12pt;background-color:white;" dir="ltr">310f0079-4016-46e9-8a09-c9ed149a85a1</span></font> is the oid of the organisation Unit to which I want view for that
user.<br>
<br>
This script is not restricting the view to one Organisation Unit. However I am able to view the full Organisation tree for that user.<br>
<br>
Please provide your help and advice on this.<br>
<br>
Regards,<br>
Shelly<br>
</div>
</span></font>
<p><br>
</p>
This message contains information that may be privileged or confidential and is the property of ILANTUS Technologies. It is intended only for the person to whom it is addressed. If you are not the intended recipient, you are not authorized to read, print, retain,
copy, disseminate, distribute, or use this message or any part thereof. If you receive this message in error, please notify the sender immediately and delete all copies of this message.
</body>
</html>