[midPoint] V3.7 - approverRef and ownerRef

[Martin Lízner - AMI Praha a.s.]

Hi,

storing approvers in role object is obsoleted indeed. New approach is
storing this information as focus (user, role, org) assignment with special
relation. This allows new features like delegation and certification.

You dont need to use metaroles or autoassignment for role approvers. You
can do it via direct assignment from user to role with special relation set
(relation=approver). In GUI, you can e.g. set it from role detail -
Governance tab.

M.

Martin Lízner
solution architect

gsm: [+420] 737 745 571
e-mail: martin.lizner at ami.cz


AMI Praha a.s.
Pláničkova 11
162 00 Praha 6
tel.: [+420] 274 783 239
web: www.ami.cz



[image: AMI Praha a.s.] <http://www.skyidentity.com/>

Textem tohoto e-mailu podepisující neslibuje uzavřít ani neuzavírá za
společnost AMI Praha a.s.
jakoukoliv smlouvu. Každá smlouva, pokud bude uzavřena, musí mít výhradně
písemnou formu.


2018-01-10 10:27 GMT+01:00 Wojciech Staszewski <
wojciech.staszewski at diagnostyka.pl>:

> Sorry but I don't get it. All of these examples use metaroles for approval
> and I want to assign approver explicitly/directly.
> So I have to use role autoassignment with approver relation?
>
> Regards!
> WS
>
> W dniu 09.01.2018 o 22:23, Wojciech Staszewski pisze:
> > Hi All!
> >
> > In the new version 3.7 the approverRef and ownerRef are marked by
> exclamation mark in the role detail GUI as if they were deprecated.
> > But he new tab appeared: "Governance", where I can assign approvers,
> managers and owners.
> >
> > I assigned an approver to a role, but I cannot find this in the role xml.
> > I can see this only in the user xml in "targetRef/relation=org:approver"
> section.
> >
> > I want to make a role template where the approver is directly assigned
> to the imported roles, without using metarole.
> > How should I do it?
> >
> > Thanks!
> > WS
> >
> >
> > _______________________________________________
> > midPoint mailing list
> > midPoint at lists.evolveum.com
> > http://lists.evolveum.com/mailman/listinfo/midpoint
> >
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> http://lists.evolveum.com/mailman/listinfo/midpoint
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20180110/ab33b8cd/attachment.htm>