[midPoint] How to enable Authorization for AssignmentType Extension fields?

Alcides Carlos de Moraes Neto alcides.neto at gmail.com
Wed Jul 4 19:07:06 CEST 2018


Hello list,

We have extended the AssignmentType schema, adding some simple boolean
flags. They are showing and working as expected.

However, if a non-admin user tries to edit an assignment, all the extension
fields are greyed out.

I have added authorization for this user to edit the assignment field for
OrgType objects. All the default fields are enabled, only the ones from the
extension are disabled. Like this:

   <authorization>
      <action>
http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#modify
</action>
      <object>
         <type>OrgType</type>
      </object>
      <c:item>assignment</c:item>
   </authorization>

What should I add to enable them? I tried
<c:item>assignment/extension</c:item> but that did not work.

Thank you
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20180704/f0b27b0e/attachment.htm>


More information about the midPoint mailing list