[midPoint] Approval by Org Manager - strange behavior

Wojciech Staszewski wojciech.staszewski at diagnostyka.pl
Wed Apr 11 21:19:28 CEST 2018


Hello!

I have a role with approval by Org Manager.

- If I (The SuperUser) assign this role to a common user, the workflow
is starting and manager gets a work item to do.
- If the user itself is requesting for the same role using SelfService,
the approval tasks is rejected automatically with "no approvers found"
message.

The approval metarole inducement, this is Ctrl+C & Ctrl+V from Evolveum
example, except evaluationStrategy:

   <inducement id="2">
      <policyRule>
         <policyConstraints>
            <assignment id="1"/>
         </policyConstraints>
         <policyActions>
            <approval id="3">
               <compositionStrategy>
                  <order>10</order>
               </compositionStrategy>
               <approvalSchema>
                  <level id="4">
                     <name>Approval by organization managers (first
decides)</name>
                     <approverExpression>
                        <script
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
                                xsi:type="c:ScriptExpressionEvaluatorType">
                          
<code>midpoint.getManagersOidsExceptUser(object)</code>
                        </script>
                     </approverExpression>
                     <evaluationStrategy>firstDecides</evaluationStrategy>
                     <outcomeIfNoApprovers>reject</outcomeIfNoApprovers>
                  </level>
               </approvalSchema>
            </approval>
         </policyActions>
      </policyRule>
      <activation>
         <administrativeStatus>enabled</administrativeStatus>
      </activation>
   </inducement>

The user is a member of two Org Units. Only one of them has a manager.
But I unassign the user from one OU, that has no manager and this not
helped.

V 3.7.1.
Any ideas? Thanks!
Wojciech Staszewski



More information about the midPoint mailing list