[midPoint] How to suppress manager approval of role, when the manager requests the role

[Yakov Revyakin]

Completely the same question. How?

On Tue, 18 Apr 2023 at 16:21, Patrik Sidler via midPoint <
midpoint at lists.evolveum.com> wrote:

> Hi Community,
>
> I have an issue and do not know how to get this solved.
>
> We have several roles created that have a "Manager Approval" metarole
> assigned to it.
>
> <role oid="5a9ece69-86ca-4e29-8457-c080287dac35">
>     <name>Manager Approval Metarole</name>
>     <inducement id="10">
>         <policyRule>
>             <policyConstraints>
>                 <assignment id="11">
>                     <operation>add</operation>
>                 </assignment>
>             </policyConstraints>
>             <policyActions>
>                 <approval id="12">
>                     <compositionStrategy>
>                         <order>10</order>
>                     </compositionStrategy>
>                     <approvalSchema>
>                         <stage id="13">
>                             <name>Line managers</name>
>                             <approverExpression>
>                                 <script>
>
> <code>midpoint.getManagersOidsExceptUser(object)</code>
>                                 </script>
>                             </approverExpression>
>
> <evaluationStrategy>firstDecides</evaluationStrategy>
>
> <outcomeIfNoApprovers>reject</outcomeIfNoApprovers>
>                         </stage>
>                     </approvalSchema>
>                 </approval>
>             </policyActions>
>         </policyRule>
>     </inducement>
> </role>
>
> Whenever one those roles are requested by someone, the manager of the
> person that receives the role has to approve the assignment.
> So far so good.
> But now, when my manager requests this role for me, he also has to approve
> this request.
> How can I suppress this approval step when the requester and the approver
> are the same person?
>
> Thank you in advance for your help.
>
> Best regards,
>
> Patrik Sidler
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> https://lists.evolveum.com/mailman/listinfo/midpoint
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20230424/ff4a95fd/attachment.htm>