[midPoint] Org. Approver and Approver Role

[Marcos Arevalo]

Thanks for the answer.  Yes, it might work.    In fact, I have implemented
it in a similar way. From a user attribute I have two mappings:  one to the
assignment of type approver,   and another mapping to the Role of approver.


But the problem is that I'm not clear how to navigate between different
objects. Can I put an attribute into a role or organization,    from the
user template ?    Is there any documentation about it ( not groovy ) ?

That is the matter of substance.

Thanks again and regads.

2017-09-26 18:37 GMT+02:00 Pavol Mederly <mederly at evolveum.com>:

> Oh yes. Now I understand better.
>
> First of all, it is strongly advisable to define approvers for a role/org
> *not* via approverRef item on a role/org, but via an assignment from the
> user (the approver) to the role/org, with a relation of org:approver.
> Although basic approval functionality would probably work with the old way
> of specifying approvals, not all features would be available.
>
> Back to your question, it could be possible to write a mapping that would
> take all assignments of a user, determine if there's any assignment with
> org:approver as a relation, and if so, add an assignment to Approver role.
> (Maybe the examination of all assignments could be in the condition for
> such a mapping.)
>
> I haven't tried that myself. But it might work.
>
> Best regards,
>
> Pavol Mederly
> Software developerevolveum.com
>
> On 26.09.2017 18:21, Marcos Arevalo wrote:
>
> Thanks for the answer .  Yes, I will explain it better.    The default
> behavior in midpoint if I define that User1 is the approver of Org1, is
> that User1 doen't have the Approver Role automaticly
>
>  I want every time I define a approver into a Org or Role   (
> $org/approver or $role/approver ),   midpoint gives Approver Role to this
> person  at the same time automatically
>
> Regards
>
> 2017-09-26 17:56 GMT+02:00 Pavol Mederly <mederly at evolveum.com>:
>
>> Hello Marcos,
>>
>> you can always use arbitrary groovy code in your mappings, even to do
>> repository searches and the like. It is to be used only as the last resort,
>> because it can get complicated and performance-degrading.
>>
>> But from your question I couldn't comprehend what exactly you are trying
>> to achieve. Could you provide an example?
>>
>> Best regards,
>>
>> Pavol Mederly
>> Software developerevolveum.com
>>
>> On 10.09.2017 5:27, Marcos Arrobas wrote:
>>
>> Hi. I have been looking for several days to respond this problem without
>> success.
>>
>> I am trying to give the role of approver to a user, in a organization
>> template (object template).   When I add a approver to an organization, I
>> want give this role to the user automaticly in the same operation
>>
>> Is there a way to assign the approver to an organization and the Approver
>> role to a user in the same operation?  Can i do this in a mapping tag into
>> the a Organization Template ? Im playing now with the mapping / target
>> attribute in the Org. Template without success.  Am I on the right path?
>>
>> I have found many examples of mappings between the same object (
>> attributes to attributes, attributes to assigments ), but I have not found
>> any about how to navigate between objects. Any help or guidance will be
>> greatly appreciated.
>>
>> Thanks in advance
>>
>>
>> _______________________________________________
>> midPoint mailing listmidPoint at lists.evolveum.comhttp://lists.evolveum.com/mailman/listinfo/midpoint
>>
>>
>>
>> _______________________________________________
>> midPoint mailing list
>> midPoint at lists.evolveum.com
>> http://lists.evolveum.com/mailman/listinfo/midpoint
>>
>>
>
> Segun el Articulo 5 de la L.O.P.D, le informamos que sus datos constan en
> un fichero titularidad de CORE NETWORKS, S.L., cuya finalidad es la gestion
> administrativa. Podra ejercer su derecho de acceso, rectificacion,
> cancelacion y oposicion mediante correo postal a C/ Serrano Galvache, 56,
> Edificio Olmo, 1 Planta - C.P. 28033 (MADRID), o enviando un correo
> electrónico a info at corenetworks.es.
>
>
> _______________________________________________
> midPoint mailing listmidPoint at lists.evolveum.comhttp://lists.evolveum.com/mailman/listinfo/midpoint
>
>
>
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> http://lists.evolveum.com/mailman/listinfo/midpoint
>
>

-- 
 

Segun el Articulo 5 de la L.O.P.D, le informamos que sus datos constan en 
un fichero titularidad de CORE NETWORKS, S.L., cuya finalidad es la gestion 
administrativa. Podra ejercer su derecho de acceso, rectificacion, 
cancelacion y oposicion mediante correo postal a C/ Serrano Galvache, 56, 
Edificio Olmo, 1 Planta - C.P. 28033 (MADRID), o enviando un correo 
electrónico a info at corenetworks.es.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20170927/1016ff61/attachment.htm>