[midPoint] Relation Manager - Give read access on roles

[Loïc Schamber]

Hi everyone.

I just found that  users in midpoint that are managers of organization can see  all the roles in the role shopping. Sadly this is not something that we want in our configuration.
We only want our manager to be able to update user data when needed and be requested to approve organization assignment ( done in an approval policy )

Is there a way to reduce write given by the manager relation ?




Loïc Schamber  | Junior IT Consultant

[logo]<https://www.serial.ch/>

lschamber at serial.ch<mailto:lschamber at serial.ch> |  +41 22 555 27 69<tel:+41%2022%20555%2027%2069>
Chemin du Pré-Fleuri 5 - CH 1228 Plan-les-Ouates
[LinkedIn]<https://www.linkedin.com/company/redcactus-by-positivethinkingcompany>  [Instagram] <https://www.instagram.com/positivethinkingcompany>
Redcactus by SERIAL www.serial.ch<www.serial.ch>
www.positivethinking.co

________________________________
Help save paper, do you really need to print this email?
The content of this email and any attachments are confidential and are intended solely for the person and/or company to whom they are addressed. The information may also be legally privileged. No employee or agent is authorized to conclude any binding agreement on behalf of SERIAL with another party by email without express written confirmation. If you have received this email in error, any use, reproduction or dissemination of this transmission is strictly prohibited. If you are not the intended recipient, please immediately notify the sender by return E-mail and delete this message, its attachments and all copies from your system. Internet communications cannot be guaranteed to be timely, secure, error or virus-free. The sender does not accept liability for any errors or omissions. Thank you for your cooperation.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20200527/0595d754/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 6827 bytes
Desc: image001.png
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20200527/0595d754/attachment.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.png
Type: image/png
Size: 451 bytes
Desc: image002.png
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20200527/0595d754/attachment-0001.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.png
Type: image/png
Size: 1129 bytes
Desc: image003.png
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20200527/0595d754/attachment-0002.png>