[midPoint] Requesting roles

[Markus Calmius]

Hi,

another question:
when a validity is expired the role gets disabled and the user looses access. 
It would be great if the role got unassigned instead of disabled, or if the icon is changed to yellow/red when the role is disabled.
Right now, it looks like the user has the role, which he does of course, but not the access the role is supposed to give.
I've attached a screen-shot of two roles:
Approved MidPoint SuperUser - enabled, role which is required to request
Work as midPoint SuperUser - disabled, but looks OK. From end-user perspective this will probably be cause for support-questions

Markus Calmius
Proton AG


On Friday, 12 July 2024 at 07:07, midpoint-request at lists.evolveum.com <midpoint-request at lists.evolveum.com> wrote:

> Send midPoint mailing list submissions to
> midpoint at lists.evolveum.com
> 
> To subscribe or unsubscribe via the World Wide Web, visit
> https://lists.evolveum.com/mailman/listinfo/midpoint
> or, via email, send a message with subject or body 'help' to
> midpoint-request at lists.evolveum.com
> 
> You can reach the person managing the list at
> midpoint-owner at lists.evolveum.com
> 
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of midPoint digest..."
> 
> 
> Today's Topics:
> 
> 1. Requesting roles (Markus Calmius)
> 
> 
> ----------------------------------------------------------------------
> 
> Message: 1
> Date: Fri, 12 Jul 2024 05:06:56 +0000
> From: Markus Calmius markus.calmius at proton.ch
> 
> To: midPoint General Discussion midpoint at lists.evolveum.com
> 
> Subject: [midPoint] Requesting roles
> Message-ID:
> h07sisF0JT5u8sfiQuEvz9RD5E1QOQPloHRREnc8l7EIO7q587KYOrEF8zkYovk97tt1XdF5JOEbNUsAAU2sQcT5c6lA4bNvhkOVDX1REdg=@proton.ch
> 
> 
> Content-Type: text/plain; charset="utf-8"
> 
> Hi,
> 
> I'm trying to configure "Access requests" and have a couple of questions:
> 
> - If I set validity to mandatory, I still get an error even if specifying a validity, why is that? [image.png]
> 
> ISO 8601
> 
> - Is it possible to have "conditional" mandatory fields?
> 
> - i.e. if risk-level of the role is "high" require a validity
> - using RolesOfTeammates, is it possible to configure a Collection?
> 
> I'm currently on 4.8(.0)
> 
> Thanks,
> Markus
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: https://lists.evolveum.com/pipermail/midpoint/attachments/20240712/b206db8b/attachment.htm
> 
> -------------- next part --------------
> A non-text attachment was scrubbed...
> Name: image.png
> Type: image/png
> Size: 49255 bytes
> Desc: not available
> URL: https://lists.evolveum.com/pipermail/midpoint/attachments/20240712/b206db8b/attachment.png
> 
> 
> ------------------------------
> 
> Subject: Digest Footer
> 
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> https://lists.evolveum.com/mailman/listinfo/midpoint
> 
> 
> ------------------------------
> 
> End of midPoint Digest, Vol 147, Issue 9
> ****************************************
-------------- next part --------------
A non-text attachment was scrubbed...
Name: superus.png
Type: image/png
Size: 59716 bytes
Desc: not available
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20240714/b424cc7e/attachment-0001.png>