[midPoint-git] [Evolveum/midpoint] 161159: Support "privileges" for scripting policy actions

[mederly]

  Branch: refs/heads/tmp/fix-10820
  Home:   https://github.com/Evolveum/midpoint
  Commit: 1611593f4e643c42857e4d16e623bc38e6f0d729
      https://github.com/Evolveum/midpoint/commit/1611593f4e643c42857e4d16e623bc38e6f0d729
  Author: Pavol Mederly <mederly at evolveum.com>
  Date:   2025-09-18 (Thu, 18 Sep 2025)

  Changed paths:
    M model/model-impl/src/main/java/com/evolveum/midpoint/model/impl/lens/projector/policy/scriptExecutor/PolicyRuleScriptExecutor.java
    M model/model-impl/src/main/java/com/evolveum/midpoint/model/impl/security/RunAsRunner.java
    M repo/security-impl/src/main/java/com/evolveum/midpoint/security/impl/SecurityContextManagerImpl.java

  Log Message:
  -----------
  Support "privileges" for scripting policy actions

The ScriptExecutionPolicyActionType.privileges item was
not used at all (by omission). This is now fixed.

There might be a slight performance degradation here:
originally, if there were multiple policy actions with
runAsRef pointing to specific user, they could be run
with just one login process (context switch). Unfortunately,
this is no longer the case, because of the implementation
aspects. See the improvement MID-10864.

Work in progress.

Related to MID-10820.



To unsubscribe from these emails, change your notification settings at https://github.com/Evolveum/midpoint/settings/notifications