[midPoint-git] [Evolveum/midpoint] 87a348: Support "privileges" for scripting policy actions

[KaterynaHonchar]

  Branch: refs/heads/support-4.8
  Home:   https://github.com/Evolveum/midpoint
  Commit: 87a348b3e25fb4f979369bdbf11b68b14e54d9f8
      https://github.com/Evolveum/midpoint/commit/87a348b3e25fb4f979369bdbf11b68b14e54d9f8
  Author: Pavol Mederly <mederly at evolveum.com>
  Date:   2025-09-19 (Fri, 19 Sep 2025)

  Changed paths:
    M model/model-impl/src/main/java/com/evolveum/midpoint/model/impl/lens/projector/policy/scriptExecutor/PolicyRuleScriptExecutor.java
    M model/model-impl/src/main/java/com/evolveum/midpoint/model/impl/security/RunAsRunner.java
    M repo/security-impl/src/main/java/com/evolveum/midpoint/security/impl/SecurityContextManagerImpl.java

  Log Message:
  -----------
  Support "privileges" for scripting policy actions

The ScriptExecutionPolicyActionType.privileges item was
not used at all (by omission). This is now fixed.

There might be a slight performance degradation here:
originally, if there were multiple policy actions with
runAsRef pointing to specific user, they could be run
with just one login process (context switch). Unfortunately,
this is no longer the case, because of the implementation
aspects. See the improvement MID-10864.

Work in progress.

Related to MID-10820.


  Commit: c1aee9df460096bc285a16808cdf3f6586b33e86
      https://github.com/Evolveum/midpoint/commit/c1aee9df460096bc285a16808cdf3f6586b33e86
  Author: honchar <honchar at evolveum.com>
  Date:   2025-09-19 (Fri, 19 Sep 2025)

  Changed paths:
    M model/model-intest/src/test/java/com/evolveum/midpoint/model/intest/TestRunAs.java
    A model/model-intest/src/test/resources/run-as/task-recompute-privileged-user.xml
    A model/model-intest/src/test/resources/run-as/user-privileged.xml

  Log Message:
  -----------
  #10826 covering with test


  Commit: 1d026f26b7d70d99be4b1d2d364c239fbf2eb17f
      https://github.com/Evolveum/midpoint/commit/1d026f26b7d70d99be4b1d2d364c239fbf2eb17f
  Author: honchar <honchar at evolveum.com>
  Date:   2025-09-19 (Fri, 19 Sep 2025)

  Changed paths:
    M model/model-impl/src/main/java/com/evolveum/midpoint/model/impl/security/RunAsRunner.java

  Log Message:
  -----------
  #10820 fix after backporting commit


Compare: https://github.com/Evolveum/midpoint/compare/cf6741b918bf...1d026f26b7d7

To unsubscribe from these emails, change your notification settings at https://github.com/Evolveum/midpoint/settings/notifications