<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">Hello Aram,<br>
<br>
The short answer is "not yet". This requirement needs quite
fine-grained authorizations to work. The authorizations are
introduced in 2.2. But although we have quite a sophisticated
model for authorizations the implementation in 2.2 is still very
rough-grained. The full implementation of fine-grained
authorizations is planned for 2.3.<br>
<br>
If you need this functionality now then your best option is
perhaps to modify the GUI and somehow hack this feature in as your
custom modification. If you use version 2.2 as a base code you can
use our authorization/RBAC system to convey your special
authorization to the GUI layer and therefore the "hack" will only
need to check for that special authorization. That should be quite
easy to do. And it should be also feasible to maintain as we plan
to switch to git source code management right after the 2.2
release. You can replace the hack with a clean solution when 2.3
release will be available (planned for Q3-Q4 this year).<br>
<br>
<pre class="moz-signature" cols="72">--
Radovan Semancik
Software Architect
evolveum.com
</pre>
<br>
On 06/01/2013 12:13 PM, Aram Somoundji wrote:<br>
</div>
<blockquote cite="mid:SNT142-W372055F1ED04142C7B1BB5CD930@phx.gbl"
type="cite">
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style>
<div dir="ltr">Hello,
<div>Can I create a role in midPoint to give the permission to
activating (enabling) an user only to the administrator. That
is to say that for example user 1 can create an user but he
cant enable it unless the administrator has approved his
request!</div>
<div>thanks</div>
<div>Aram</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
midPoint mailing list
<a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">
</pre>
</body>
</html>