[midPoint] Make a UserType attribute as immutable

[Yakov Revyakin]

Hi Pavol,
Thanks a lot for the confirmation.
I've already implemented this on a resource level.
However, I had to add the limitations element in each connected resource.
Yakov


On Wed, 23 Aug 2023 at 12:14, Pavol Mederly via midPoint <
midpoint at lists.evolveum.com> wrote:

> Hello Yakov,
>
> this functionality was implemented more comprehensively for resource
> attributes, but only partially for focus items.
>
> I added that information to the schema, to be clear.
>
> Maybe you could file an improvement JIRA issue.
>
> Best regards,
>
> --
> Pavol Mederly
> Software developer
> evolveum.com
>
> On 22/08/2023 17:53, Yakov Revyakin via midPoint wrote:
> > Hi all,
> > I'd like to have the ability to read and add (during user creation)
> > UserType built-in 'employeeNumber' attribute and forbid it to modify.
> >
> > I can't meat expected behavior with the following approach in user
> > object template:
> >    <item>
> >         <ref>employeeNumber</ref>
> >         <limitations>
> >             <layer>model</layer>
> >             <access>
> >                 <read>true</read>
> >                 <add>true</add>
> >                 <modify>false</modify>
> >             </access>
> >         </limitations>
> >     </item>
> >
> > It works if I use the presentation layer instead of model or schema,
> > but I want to make the attribute immutable if reconciliation wants to
> > modify the attribute.
> >
> > Probably my understanding of this feature is wrong. Could you provide
> > some clarification on this?
> > Thanks,
> > Yakov
> >
> >
> > _______________________________________________
> > midPoint mailing list
> > midPoint at lists.evolveum.com
> > https://lists.evolveum.com/mailman/listinfo/midpoint
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> https://lists.evolveum.com/mailman/listinfo/midpoint
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20230823/37b6fedc/attachment.htm>