<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Hi Ilja,<br>
<br>
in case that the "some cases" can be programatically defined by
user's attributes or some other properties, I think maybe you can
consider using code from example on
<a class="moz-txt-link-freetext" href="https://wiki.evolveum.com/display/midPoint/Some+examples">https://wiki.evolveum.com/display/midPoint/Some+examples</a> :<br>
(Sensitive Role 3 example)<br>
<br>
<div class="line number10 index9 alt1"><code class="java spaces"> </code><code
class="java plain"><<b>automaticallyApproved</b>></code></div>
<div class="line number11 index10 alt2"><code class="java plain">
<description>If the user works in F0006 (Scumm Bar), the
assignment of </code><code class="java keyword">this</code> <code
class="java plain">role is automatically approved </code><code
class="java keyword">for</code> <code class="java plain">him.</description></code></div>
<div class="line number12 index11 alt1"><code class="java plain">
<script></code></div>
<div class="line number13 index12 alt2"><code class="java plain">
<code><b>midpoint.isMemberOf(object,
midpoint.getOrgByName(</b></code><b><code class="java string">"F0006"</code></b><code
class="java plain"><b>).getOid())</b></code></code></div>
<div class="line number14 index13 alt1"><code class="java spaces"> </code><code
class="java plain"></script></code></div>
<div class="line number15 index14 alt2"><code class="java spaces"> </code><code
class="java plain"></<b>automaticallyApproved</b>></code></div>
<br>
Regards,<br>
Ivan<br>
<br>
<div class="moz-cite-prefix">On 05/25/2015 05:24 PM, Илья Дорофеев
wrote:<br>
</div>
<blockquote
cite="mid:F82253638486D44DABA51EC404D48AF385330C@EX-MB1.solar.local"
type="cite">
<pre wrap="">Hi,
I have user template mappings which assign / unassign certain roles depending on the values of certain attributes. In some cases I want these assignments / unassignments to be passed through an approval process. As these changes appear to be secondary deltas, as far as I understand, I have two options: either to utilize the general change processor or implement my own change processor. But it is not clear which one to choose. What advantages and disadvantages do both provide? In addition to this, I see the PrimaryChangeProcessor which seems suitable for my needs (by implementing specific aspect), but its functionality restricted solely to primary deltas. Could you elaborate on what stands behind this design? Why couldn't it be expanded to processing secondary deltas?
Ilya Dorofeev
Software Architect
Solar Security
_______________________________________________
midPoint mailing list
<a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Ing. Ivan Noris
Senior Identity Management Engineer & IDM Architect
evolveum.com evolveum.com/blog/
___________________________________________________
"Semper Id(e)M Vix."
</pre>
</body>
</html>