[midPoint] Channel selection for policy constraints

[Gruber, Michael]

Hi,

Did you try getChannel() in Midpointfunctions?
Using e.g. midpoint.channel (groovy) should be available almost anywhere where expressions can be used...

Von: midPoint [mailto:midpoint-bounces at lists.evolveum.com] Im Auftrag von iam-mailing at tk.de
Gesendet: Freitag, 27. März 2020 11:57
An: midpoint at lists.evolveum.com
Betreff: [midPoint] Channel selection for policy constraints

Hello together,

we use the rest interface for our custom web UI which a normal End-user will use. On the other hand, we have a small pool of users that will use the MidPoint UI for administration purposes and for manual tasks. If a user requests a change with the custom web UI, the system should create cases - only for reporting or with approver steps. If an administrative user edits a user with the MidPoint UI, the changes should be applied directly without approvals.

We use policy constraints in roles, which are assign to all user to produce such cases and approver steps. That works very well. But if we have manual tasks for the midpoint administrators, we don't want that the system produce any cases or approver steps.

Does anyone knows a way to detect if a request is from the midpoint UI (Administrators) or from the REST API (End-Users)? We looked for a channel mechanic like in the resource, but didn't succeed.

Thanks in advanced
Stephan Hoepfner
WWK Lebensversicherung a. G., Vorstand: Jürgen Schrameier (V.), Rainer Gebhart (stv. V.), Dirk Fassott; Vorsitzender des Aufsichtsrats: Dr. Frank Schindelhauer, Sitz München, Registergericht München HR B 211; WWK Allgemeine Versicherung AG, Vorstand: Jürgen Schrameier (V.), Rainer Gebhart (stv. V.), Dirk Fassott; Vorsitzender des Aufsichtsrats: Prof. Dr. Peter Reiff, Sitz München, Registergericht München HR B 5553; WWK Vermögensverwaltungs und Dienstleistungs GmbH, Geschäftsführer: Karl Ruffing, Stefan Sedlmeir, Sitz München, Registergericht München HR B 76323; WWK Pensionsfonds AG, Vorstand: Karl Ruffing, Heinrich Schüppert; Vorsitzender des Aufsichtsrats: Dirk Fassott, Sitz München, Registergericht München HR B 146295; Hausanschrift: Marsstraße 37, 80335 München; WWK Investment S.A., Verwaltungsrat: Karl Ruffing (V.), Stefan Bauer, Christoph Kraiker (Hauck & Aufhäuser), Handelsregister: R.C. Luxembourg Nr. B 81 270, Sitz der Gesellschaft: 1c, rue Gabriel Lippmann, L-5365 Munsbach
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20200327/b702389b/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 7027 bytes
Desc: not available
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20200327/b702389b/attachment.bin>