[midPoint-git] [Evolveum/midpoint] 6b4cb1: Clarify legacy associations vs object types

[mederly]

  Branch: refs/heads/master
  Home:   https://github.com/Evolveum/midpoint
  Commit: 6b4cb111bbe6eb3d6f559df9b10073887fcf668b
      https://github.com/Evolveum/midpoint/commit/6b4cb111bbe6eb3d6f559df9b10073887fcf668b
  Author: Pavol Mederly <mederly at evolveum.com>
  Date:   2024-08-22 (Thu, 22 Aug 2024)

  Changed paths:
    M infra/schema/src/main/java/com/evolveum/midpoint/schema/processor/ResourceSchemaParser.java
    M infra/schema/src/main/java/com/evolveum/midpoint/schema/processor/ShadowAssociationDefinitionImpl.java
    M infra/schema/src/main/java/com/evolveum/midpoint/schema/processor/ShadowRelationParticipantType.java
    M infra/schema/src/main/java/com/evolveum/midpoint/schema/processor/SimulatedAssociationClassParticipantDefinition.java
    M infra/schema/src/main/java/com/evolveum/midpoint/schema/processor/SimulatedShadowReferenceTypeDefinition.java
    M infra/test-util/src/main/java/com/evolveum/midpoint/test/util/MidPointTestConstants.java
    M provisioning/provisioning-impl/src/test/java/com/evolveum/midpoint/provisioning/impl/dummy/AbstractDummyTest.java
    A provisioning/provisioning-impl/src/test/java/com/evolveum/midpoint/provisioning/impl/dummy/TestDummyIntents.java
    A provisioning/provisioning-impl/src/test/resources/dummy/dummy-intents/resource-no-default-account-fixed.xml
    A provisioning/provisioning-impl/src/test/resources/dummy/dummy-intents/resource-no-default-account.xml
    A provisioning/provisioning-impl/src/test/resources/dummy/dummy-intents/resource-with-default-account.xml
    M provisioning/provisioning-impl/testng-integration.xml
    M repo/repo-test-util/src/main/java/com/evolveum/midpoint/test/DummyResourceContoller.java
    M testing/story/src/test/resources/university/resource-opendj.xml

  Log Message:
  -----------
  Clarify legacy associations vs object types

!!! In order to work properly, simulated associations should be known
at the level of object classes. This was true from the beginning,
but now, with shadow caching, it is required even more. !!!

For associations (reference attributes) simulated via capabilities,
this is ensured by design. But legacy associations are traditionally
defined at the level of object types, not object classes.

The connection to object class definition is usually done by using
"default=true" setting for the object type where the association is
defined. (Although this brings some issues if there are other object
types of the same OC, but without the association - see e.g. MID-9591
and MID-9910.)

Hence, this commit:

1. Adds TestDummyIntents to explore the behavior of legacy associations,
so that we would exactly know how much they can be supported e.g. with
the new shadow caching.

2. Fixes TestUniversity in story tests (it was failing with caching
enabled) by specifying the association at the level of object class:
this time explicitly, without using default=true. (Resource definition
parsing code had to be slightly adapted for this.)


  Commit: 3650245e4e286b9d228c22d802e5fd0e2e157f6d
      https://github.com/Evolveum/midpoint/commit/3650245e4e286b9d228c22d802e5fd0e2e157f6d
  Author: Pavol Mederly <mederly at evolveum.com>
  Date:   2024-08-22 (Thu, 22 Aug 2024)

  Changed paths:
    M docs/roles-policies/certification/authorization.adoc
    A docs/roles-policies/gradual-policy-enforcement.adoc
    M docs/roles-policies/policy-rules.adoc
    M docs/roles-policies/segregation-of-duties.adoc
    M docs/schema/policy.adoc
    M gui/admin-gui/package-lock.json
    M gui/admin-gui/package.json
    M gui/admin-gui/src/main/java/com/evolveum/midpoint/gui/impl/component/tile/MultiSelectTileTablePanel.html
    M gui/admin-gui/src/main/java/com/evolveum/midpoint/gui/impl/component/tile/SingleSelectTileTablePanel.html
    M gui/admin-gui/src/main/java/com/evolveum/midpoint/gui/impl/page/admin/certification/PageActiveCampaigns.java
    M gui/admin-gui/src/main/java/com/evolveum/midpoint/gui/impl/page/admin/certification/PageAdminCertification.java
    M gui/admin-gui/src/main/java/com/evolveum/midpoint/gui/impl/page/admin/certification/PageMyActiveCampaigns.java
    M gui/admin-gui/src/main/java/com/evolveum/midpoint/gui/impl/page/admin/certification/component/CampaignStatisticsPanel.java
    A gui/admin-gui/src/main/java/com/evolveum/midpoint/gui/impl/page/admin/certification/component/ReviewersStatisticsPanel.html
    A gui/admin-gui/src/main/java/com/evolveum/midpoint/gui/impl/page/admin/certification/component/ReviewersStatisticsPanel.java
    M gui/admin-gui/src/main/java/com/evolveum/midpoint/gui/impl/page/admin/resource/PageResource.java
    M gui/admin-gui/src/main/java/com/evolveum/midpoint/gui/impl/page/admin/resource/component/wizard/schemaHandling/associationType/subject/mappingContainer/MappingContainerTablePanel.html
    M gui/admin-gui/src/main/java/com/evolveum/midpoint/gui/impl/page/admin/resource/component/wizard/schemaHandling/objectType/AbstractSpecificMappingTileTable.html
    M gui/admin-gui/src/main/java/com/evolveum/midpoint/gui/impl/page/admin/resource/component/wizard/schemaHandling/objectType/basic/DelineationResourceObjectTypeStepPanel.java
    M infra/schema/src/main/resources/xml/ns/public/common/common-provisioning-3.xsd
    M repo/security-api/src/main/java/com/evolveum/midpoint/security/api/AuthorizationConstants.java

  Log Message:
  -----------
  Merge remote-tracking branch 'origin/master'


Compare: https://github.com/Evolveum/midpoint/compare/3d8d871c7696...3650245e4e28

To unsubscribe from these emails, change your notification settings at https://github.com/Evolveum/midpoint/settings/notifications