<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">Hello Anand,<br>
<br>
<blockquote type="cite">Well, it would really be nice if I could
achieve automatic approvals for induced roles so that it will be
beneficial while using multilevel role inducements with
approvals also.</blockquote>
I agree. I've created a record for this issue (<a
href="https://jira.evolveum.com/browse/MID-2130">MID-2130</a>).
Unfortunately, I cannot promise any specific date when it could be
implemented. Please contact Igor or Radovan regarding this.<br>
<br>
<blockquote type="cite">I would also like to know how to add
approval information to roles. I tried going through the
documentation but failed to find anything.</blockquote>
All relevant information about workflows is available <a
href="https://wiki.evolveum.com/display/midPoint/Workflows">at
this page</a>.<br>
<br>
In particular, how to configure approval information for roles is
<a href="https://wiki.evolveum.com/display/midPoint/Some+examples">here</a>.
For example, when adding a single approver for a role, just add
the <approverRef> reference to the role (as in Sensitive
Role 1). Multi-level structure can be added via
<approvalSchema> (as in Sensitive Role 2). Dynamically
defined approvers can be specified via expressions under
<approverExpression>/<automaticallyApproved>
properties (as in Sensitive Role 3).<br>
<br>
As for your other question,<br>
<blockquote type="cite">I want to configure Activity Workflow In
Midpoint. I gone through your documentation but I did not find
any document related to Activiti workflow Configuration.</blockquote>
I would say this:<br>
<br>
1) role-related approvals are enabled as <a
href="https://wiki.evolveum.com/display/midPoint/Workflow+configuration">written
here</a>, namely by including the following in the system config
file:<br>
<br>
<div class="container" title="Hint: double-click to select code">
<div class="line number1 index0 alt2"><code class="html plain"><</code><code
class="html keyword">workflow</code><code class="html plain">></code></div>
<div class="line number2 index1 alt1"><code class="html plain">
<</code><code class="html keyword">changeProcessors</code><code
class="html plain">></code></div>
<div class="line number3 index2 alt2"><code class="html plain">
<</code><code class="html keyword">primaryUserChangeProcessor</code><code
class="html plain">></code></div>
<div class="line number4 index3 alt1"><code class="html plain">
<</code><code class="html keyword">aspect</code><code
class="html plain">>addRoleAssignmentAspect</</code><code
class="html keyword">aspect</code><code class="html plain">></code></div>
<div class="line number5 index4 alt2"><code class="html plain">
</</code><code class="html keyword">primaryUserChangeProcessor</code><code
class="html plain">></code></div>
<div class="line number6 index5 alt1"><code class="html plain">
</</code><code class="html keyword">changeProcessors</code><code
class="html plain">></code></div>
<div class="line number7 index6 alt2"><code class="html spaces"> </code><code
class="html plain"></</code><code class="html keyword">workflow</code><code
class="html plain">><br>
<br>
</code></div>
</div>
2) as for other uses of workflows, you first have to specify what
exactly has to be approved, and how. To do that, it is necessary
to read the following documents:<br>
<ul>
<li>architectural description of workflows in midPoint (at least
to find out what is a change processor and workflow aspect): <a
href="https://wiki.evolveum.com/display/midPoint/Workflow+Management">https://wiki.evolveum.com/display/midPoint/Workflow+Management</a></li>
<li>how to create your own workflow aspect: <a
href="https://wiki.evolveum.com/display/midPoint/How+to+develop+your+own+approval+processes+-+case+1+-+using+primary+change+processor+and+general+item+approval+process">https://wiki.evolveum.com/display/midPoint/How+to+develop+your+own+approval+processes+-+case+1+-+using+primary+change+processor+and+general+item+approval+process</a><br>
</li>
</ul>
If you would need any specific assistance, just ask here. We're
ready to help you.<br>
<br>
Best regards,<br>
Pavol<br>
<br>
On 18. 12. 2014 15:12, Anand Kothekar wrote:<br>
</div>
<blockquote
cite="mid:CAHUT-CTAbXmN+ZTS3r3m+Y+D62G1Mahf5qaA=pPMPUaEMd9s2Q@mail.gmail.com"
type="cite">
<div dir="ltr">Hi,
<div><br>
</div>
<div>Can anyone provide me assistance on this..<br>
</div>
<div><br>
</div>
<div><br>
</div>
<div>Thanks</div>
<div>Anand Kothekar </div>
<img moz-do-not-send="true" class="mailtrack-img"
src="https://mailtrack.io/trace/mail/b293e707226868d1ee53043bbab1515cc0e0c8d1.png"
height="0" width="0"></div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Mon, Dec 15, 2014 at 7:22 PM, Anand
Kothekar <span dir="ltr"><<a moz-do-not-send="true"
href="mailto:anand.kothekar@confluxsys.com"
target="_blank">anand.kothekar@confluxsys.com</a>></span>
wrote:
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">Hello Pavol,
<div><br>
</div>
<div>Well, it would really be nice if I could achieve
automatic approvals for induced roles so that it will be
beneficial while using multilevel role inducements with
approvals also.</div>
<div><br>
</div>
<div>I would also like to know how to add approval
information to roles. I tried going through the
documentation but failed to find anything.</div>
<div><br>
</div>
<div>It will be great if you provide me link to any of the
documentation or inform about adding approval
information to role so that Automatic Approval for Role
Inheritance will be achieved.</div>
<div><br>
</div>
<div><br>
</div>
<div>Thanks.</div>
<img moz-do-not-send="true"
src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7"
height="0" width="0"></div>
<div class="HOEnZb">
<div class="h5">
<div class="gmail_extra"><br>
<div class="gmail_quote">On Mon, Dec 15, 2014 at 5:04
PM, Pavol Mederly <span dir="ltr"><<a
moz-do-not-send="true"
href="mailto:mederly@evolveum.com"
target="_blank">mederly@evolveum.com</a>></span>
wrote:
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<div>Hello Anand,<br>
<br>
workflow requests are evaluated in so called
"primary phase" of operation execution. At
that time, only changes explicitly requested
by the user are considered. So, the obvious
solution to your problem is to add approval
information to each role that includes your
sensitive role as an inducement.<br>
<br>
Is it OK for you? Or, is your situation such
that you require the ability to automatically
start all approvals for induced roles? If so,
please describe it in a few words here.<br>
<br>
Best regards,<br>
Pavol<br>
<br>
PS: I've noticed you write both to midpoint
and midpoint-dev list. It is not necessary to
do so. I would suggest to send questions like
this one only to midpoint list (as it is a
user-oriented question, not a
development-related one).
<div>
<div><br>
<br>
On 13. 12. 2014 11:51, Anand Kothekar
wrote:<br>
</div>
</div>
</div>
<blockquote type="cite">
<div>
<div>
<div dir="ltr">Hi
<div><br>
</div>
<div>I was working on <b>Role
Approvals. </b>I created a role
very similar to the <b>Sensitive Role
2.</b></div>
<div><b><br>
</b></div>
<div>The Role I created is working fine
and also requesting for approvals as
expected. I created one more Role
having the previously role as its
inducement(New Role Inheriting The
Previous Role).</div>
<div><br>
</div>
<div>Here the hierarchy is working fine
and previous role's Groups are getting
added successfully but without any
approval request.</div>
<div><br>
</div>
<div>So, Will you please help me out for
forcing approvals on role Inducements
also.</div>
<div><br>
</div>
<div>Please forward me any links related
to the issue if available.</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div>Regards</div>
<div> Anand</div>
<span><font color="#888888">
<div><br>
</div>
</font></span><img
moz-do-not-send="true" height="0"
width="0"></div>
<br>
<fieldset></fieldset>
<br>
</div>
</div>
<pre>_______________________________________________
midPoint mailing list
<a moz-do-not-send="true" href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a moz-do-not-send="true" href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
</div>
<br>
_______________________________________________<br>
midPoint mailing list<br>
<a moz-do-not-send="true"
href="mailto:midPoint@lists.evolveum.com"
target="_blank">midPoint@lists.evolveum.com</a><br>
<a moz-do-not-send="true"
href="http://lists.evolveum.com/mailman/listinfo/midpoint"
target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
<br>
</blockquote>
</div>
</div>
</div>
</div>
</blockquote>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
midPoint mailing list
<a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
</body>
</html>