<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-15">
<style type="text/css" style="display:none"><!--P{margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr" style="font-size:12pt;color:#000000;background-color:#FFFFFF;font-family:Calibri,Arial,Helvetica,sans-serif;">
<p>Hello,<br>
</p>
<p>I am trying to test (in MP 3.4) the situation where user requests a role which requires user's organization manager approval but so far have not succeded.<br>
I created following role (based on Sensitive Role 3 example here: https://wiki.evolveum.com/display/midPoint/Some+examples )<br>
<br>
<span style="font-family: Consolas,monospace; font-size: 11pt; color: rgb(114, 50, 173);"><span style="color: rgb(114, 50, 173);"><role xmlns="http://midpoint.evolveum.com/xml/ns/public/common/common-3"></span></span><br style="font-family: Consolas,monospace; font-size: 11pt; color: rgb(114, 50, 173);">
<span style="font-family: Consolas,monospace; font-size: 11pt; color: rgb(114, 50, 173);"><span style="color: rgb(114, 50, 173);"> <name>testrole-needsmanagerapproval</name></span></span><br style="font-family: Consolas,monospace; font-size: 11pt; color: rgb(114, 50, 173);">
<span style="font-family: Consolas,monospace; font-size: 11pt; color: rgb(114, 50, 173);"><span style="color: rgb(114, 50, 173);"> <requestable>true</requestable></span></span><br style="font-family: Consolas,monospace; font-size: 11pt; color: rgb(114, 50, 173);">
<span style="font-family: Consolas,monospace; font-size: 11pt; color: rgb(114, 50, 173);"><span style="color: rgb(114, 50, 173);"> <approverExpression></span></span><br style="font-family: Consolas,monospace; font-size: 11pt; color: rgb(114, 50, 173);">
<span style="font-family: Consolas,monospace; font-size: 11pt; color: rgb(114, 50, 173);"><span style="color: rgb(114, 50, 173);"> <description>Get user's managers (except the user itself)</description></span></span><br style="font-family: Consolas,monospace; font-size: 11pt; color: rgb(114, 50, 173);">
<span style="font-family: Consolas,monospace; font-size: 11pt; color: rgb(114, 50, 173);"><span style="color: rgb(114, 50, 173);"> <script></span></span><br style="font-family: Consolas,monospace; font-size: 11pt; color: rgb(114, 50, 173);">
<span style="font-family: Consolas,monospace; font-size: 11pt; color: rgb(114, 50, 173);"><span style="color: rgb(114, 50, 173);"> <code>midpoint.getManagersOidsExceptUser(object)</code></span></span><br style="font-family: Consolas,monospace; font-size: 11pt; color: rgb(114, 50, 173);">
<span style="font-family: Consolas,monospace; font-size: 11pt; color: rgb(114, 50, 173);"><span style="color: rgb(114, 50, 173);"> </script></span></span><br style="font-family: Consolas,monospace; font-size: 11pt; color: rgb(114, 50, 173);">
<span style="font-family: Consolas,monospace; font-size: 11pt; color: rgb(114, 50, 173);"><span style="color: rgb(114, 50, 173);"> </approverExpression></span></span><br style="font-family: Consolas,monospace; font-size: 11pt; color: rgb(114, 50, 173);">
<span style="font-family: Consolas,monospace; font-size: 11pt; color: rgb(114, 50, 173);"><span style="color: rgb(114, 50, 173);"></role></span></span><br style="font-family: Consolas,monospace; font-size: 11pt;">
<br>
I have created users testuser and testmanager and added both to the organization testorg as members and also testmanager as manager.<br>
I added role Approver to testmanager.<br>
Now when I request the role "testrole-needsmanagerapproval" for user testuser the role gets automatically assigned without manager approval. Seems that the getManagersOidsExceptUser function does not find any manager for that user and therefore approves automatically
this role. Why it is so?<br>
<br>
</p>
<p>Best regards,</p>
<p>Aivo Kuhlberg<br>
</p>
<br>
<hr>
<font face="Arial" color="Gray" size="2">Käesolev e-kiri võib sisaldada asutusesiseseks kasutamiseks tunnistatud teavet.<br>
This e-mail may contain information which is classified for official use.</font>
</body>
</html>