[midPoint] Access to own cases / work items

[Peter Holes]

Hi Luca,

I think that read authorization for CaseType should be enough.
try something like this (put it into your EndUser role / Archetype):
##
<authorization>
            <action>http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#read</action>
            <object>
                <type>CaseType</type>
            </object>
</authorization>
##

and than you can also manage the Tab visibility through objectForms

##
<adminGuiConfiguration>
          <objectForms>
                <objectForm>
                    <type>c:CaseType</type>
                    <formSpecification>

<panelUri>http://midpoint.evolveum.com/xml/ns/public/gui/component-3#caseTabOverviewApproval</panelUri>
                    </formSpecification>
                    <includeDefaultForms>true</includeDefaultForms>
                </objectForm>
           </objectForms>
</adminGuiConfiguration>

##

This works for me.
Peter.