[midPoint] panel visibility

[Ivan Noris]

Hi Markus,

I think you are hitting this:

https://docs.evolveum.com/midpoint/reference/support-4.8/admin-gui/admin-gui-config/#how-it-works

" If several roles specify conflicting values then the behavior is 
unpredictable. It is a responsibility of midPoint administrator to 
ensure the consistency."

Last time I had this issue, I resorted to have two distinct roles, one 
for end user and other for admin users (in my case) conditionally 
induced from main end user role.

Best regards,

Ivan

On 3. 7. 2025 9:10, Markus Calmius via midPoint wrote:
>
> Hi,
>
> Info: running MidPoint 4.8.5.
>
> Following up on my earlier message regarding delegations:
>
> I’d like to hide the /Delegations/ and /Delegated to Me/ panels for 
> all standard users, but ensure they remain visible for users who have 
> delegation rights.
>
> Based on the documentation, I assumed this could be achieved by setting:
>
> |<visibility>vacant</visibility> |
>
> in the role assigned to all users, and then overriding it with 
> |<visibility>automatic</visibility>| or 
> |<visibility>visible</visibility>| in the role granted to users with 
> delegation rights. However, this doesn’t seem to have the intended effect.
>
> Additional context:
>
>  *
>
>     All users are assigned a *basic access* role
>
>  *
>
>     A subset of users also receive an *authorised to approve and
>     delegate* role
>
> Currently, the /Delegations/ panels are hidden for all users—even 
> those who have the additional delegation role.
>
> Any guidance on how to resolve this would be appreciated.
>
> Thanks in advance,
>
> Markus
>
>
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> https://lists.evolveum.com/mailman/listinfo/midpoint

-- 
Ivan Noris
Expert Identity Engineer
evolveum.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20250703/451c32e7/attachment.htm>