[midPoint-git] [Evolveum/midpoint] afd71d: Load work items by searchContainers, not getObject

mederly noreply at github.com
Wed Sep 7 11:46:30 CEST 2022


  Branch: refs/heads/support-4.4
  Home:   https://github.com/Evolveum/midpoint
  Commit: afd71d937c29a055cacf42019c01e1cb53f65749
      https://github.com/Evolveum/midpoint/commit/afd71d937c29a055cacf42019c01e1cb53f65749
  Author: Pavol Mederly <mederly at evolveum.com>
  Date:   2022-09-07 (Wed, 07 Sep 2022)

  Changed paths:
    M gui/admin-gui/src/main/java/com/evolveum/midpoint/web/page/admin/cases/PageCaseWorkItem.java

  Log Message:
  -----------
  Load work items by searchContainers, not getObject

Due to the incomplete authorizations implementation regarding cases
and their work items, we rely on GUI to check the access rights when
displaying them.

This commit loads the work items using searchContainers method (that
ignores the authorizations) instead of getObject (which checks them).

This allows keeping the current Approver role definition, i.e. the one
without too broad authorizations for reading CaseType objects.




More information about the midPoint-svn mailing list