[midPoint] How to enable Authorization for AssignmentType Extension fields?

Alcides Carlos de Moraes Neto alcides.neto at gmail.com
Mon Jul 9 20:59:43 CEST 2018


Anyone? sorry for the up, but I've been struggling with this.

I have tried <c:item>assignment/extension/fieldName</c:item> entries, that
does not work either.

2018-07-04 14:07 GMT-03:00 Alcides Carlos de Moraes Neto <
alcides.neto at gmail.com>:

> Hello list,
>
> We have extended the AssignmentType schema, adding some simple boolean
> flags. They are showing and working as expected.
>
> However, if a non-admin user tries to edit an assignment, all the
> extension fields are greyed out.
>
> I have added authorization for this user to edit the assignment field for
> OrgType objects. All the default fields are enabled, only the ones from the
> extension are disabled. Like this:
>
>    <authorization>
>       <action>http://midpoint.evolveum.com/xml/ns/public/
> security/authorization-model-3#modify</action>
>       <object>
>          <type>OrgType</type>
>       </object>
>       <c:item>assignment</c:item>
>    </authorization>
>
> What should I add to enable them? I tried <c:item>assignment/extension</c:item>
> but that did not work.
>
> Thank you
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20180709/0823d47a/attachment.htm>


More information about the midPoint mailing list