<html>
  <head>
    <meta content="text/html; charset=utf-8" http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    That's right. There is a distinction between accessing report
    definitions (e.g. parameters, scheduling info) and accessing report
    outputs (e.g. the PDF files produced by the report tasks).<br>
    <br>
    <pre class="moz-signature" cols="72">-- 
Radovan Semancik
Software Architect
evolveum.com
</pre>
    <br>
    <br>
    <div class="moz-cite-prefix">On 09/15/2016 12:54 PM, Aivo Kuhlberg
      wrote:<br>
    </div>
    <blockquote cite="mid:1473936884466.44450@rmit.ee" type="cite">
      <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
      <style type="text/css" style="display:none"><!--P{margin-top:0;margin-bottom:0;} p
        {margin-top:0;
        margin-bottom:0}--></style>
      <p>I think I figured out what my problem was. Seems that there
        exists also ReportOutputType. So the following additional
        authorization solved my problems:<br>
        <br>
        <span style="color: rgb(189, 19, 152); font-family:
          Consolas,monospace; font-size: 11pt;"><authorization></span><br
          style="color: rgb(189, 19, 152); font-family:
          Consolas,monospace; font-size: 11pt;">
        <span style="color: rgb(189, 19, 152); font-family:
          Consolas,monospace; font-size: 11pt;"> 
<action><a class="moz-txt-link-freetext" href="http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#read">http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#read</a></action></span><br
          style="color: rgb(189, 19, 152); font-family:
          Consolas,monospace; font-size: 11pt;">
        <span style="color: rgb(189, 19, 152); font-family:
          Consolas,monospace; font-size: 11pt;"> 
<action><a class="moz-txt-link-freetext" href="http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#delete">http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#delete</a></action></span><br
          style="color: rgb(189, 19, 152); font-family:
          Consolas,monospace; font-size: 11pt;">
        <span style="color: rgb(189, 19, 152); font-family:
          Consolas,monospace; font-size: 11pt;">  <object></span><br
          style="color: rgb(189, 19, 152); font-family:
          Consolas,monospace; font-size: 11pt;">
        <span style="color: rgb(189, 19, 152); font-family:
          Consolas,monospace; font-size: 11pt;">    
          <type>ReportOutputType</type></span><br
          style="color: rgb(189, 19, 152); font-family:
          Consolas,monospace; font-size: 11pt;">
        <span style="color: rgb(189, 19, 152); font-family:
          Consolas,monospace; font-size: 11pt;">  </object></span><br
          style="color: rgb(189, 19, 152); font-family:
          Consolas,monospace; font-size: 11pt;">
        <span style="color: rgb(189, 19, 152); font-family:
          Consolas,monospace; font-size: 11pt;"></authorization></span><br>
        <br>
        Best Regards,<br>
        Aivo Kuhlberg<br>
      </p>
      <div style="font-size:12pt; color:#000000;
        background-color:#FFFFFF;
        font-family:Calibri,Arial,Helvetica,sans-serif" dir="ltr">
        <hr tabindex="-1" style="display:inline-block; width:98%">
        <div id="divRplyFwdMsg" dir="ltr"><font style="font-size:11pt"
            face="Calibri, sans-serif" color="#000000"><b>Saatja:</b>
            midPoint <a class="moz-txt-link-rfc2396E" href="mailto:midpoint-bounces@lists.evolveum.com"><midpoint-bounces@lists.evolveum.com></a>
            nimelAivo Kuhlberg <a class="moz-txt-link-rfc2396E" href="mailto:aivo.kuhlberg@rmit.ee"><aivo.kuhlberg@rmit.ee></a><br>
            <b>Saadetud:</b> 15. september 2016 13:40<br>
            <b>Adressaat:</b> midpoint<br>
            <b>Teema:</b> [midPoint] Authorizing access to reports</font>
          <div> </div>
        </div>
        <div>
          <p>I want to create a role which gives user ability to access
            reports section. User should see reports, run them and
            access the generated reports. Unfortunately there is not
            much information found in wiki about reports authorization.
            So far I figured out how to give access to reports section
            by adding reportsAll GUI authorization. I also figured out
            that there exists ReportType object and by adding read
            ability to that object I succeeded to run report.
            Unfortunately I dont see any created reports. Seems that
            there is still some authorization missing. My current
            authorizations in role are following:<br>
            <br>
            <span style="font-family:Consolas,monospace; font-size:11pt;
              color:rgb(0,111,201)"><span style="color:rgb(0,111,201)"></span></span></p>
          <p><span style="font-family:Consolas,monospace;
              color:rgb(189,19,152); font-size:11pt"><span
                style="color:rgb(189,19,152)"><authorization></span></span><br
              style="font-family:Consolas,monospace;
              color:rgb(189,19,152); font-size:11pt">
            <span style="font-family:Consolas,monospace;
              color:rgb(189,19,152); font-size:11pt"><span
                style="color:rgb(189,19,152)"> 
<action><a class="moz-txt-link-freetext" href="http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#reportsAll">http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#reportsAll</a></action></span></span><br
              style="font-family:Consolas,monospace;
              color:rgb(189,19,152); font-size:11pt">
            <span style="font-family:Consolas,monospace;
              color:rgb(189,19,152); font-size:11pt"><span
                style="color:rgb(189,19,152)"></authorization></span></span><br
              style="font-family:Consolas,monospace;
              color:rgb(189,19,152); font-size:11pt">
            <span style="font-family:Consolas,monospace;
              color:rgb(189,19,152); font-size:11pt"><span
                style="color:rgb(189,19,152)"><authorization></span></span><br
              style="font-family:Consolas,monospace;
              color:rgb(189,19,152); font-size:11pt">
            <span style="font-family:Consolas,monospace;
              color:rgb(189,19,152); font-size:11pt"><span
                style="color:rgb(189,19,152)"> 
<action><a class="moz-txt-link-freetext" href="http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#read">http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#read</a></action></span></span><br
              style="font-family:Consolas,monospace;
              color:rgb(189,19,152); font-size:11pt">
            <span style="font-family:Consolas,monospace;
              color:rgb(189,19,152); font-size:11pt"><span
                style="color:rgb(189,19,152)">  <object></span></span><br
              style="font-family:Consolas,monospace;
              color:rgb(189,19,152); font-size:11pt">
            <span style="font-family:Consolas,monospace;
              color:rgb(189,19,152); font-size:11pt"><span
                style="color:rgb(189,19,152)">    
                <type>ReportType</type></span></span><br
              style="font-family:Consolas,monospace;
              color:rgb(189,19,152); font-size:11pt">
            <span style="font-family:Consolas,monospace;
              color:rgb(189,19,152); font-size:11pt"><span
                style="color:rgb(189,19,152)">  </object></span></span><br
              style="font-family:Consolas,monospace;
              color:rgb(189,19,152); font-size:11pt">
            <span style="font-family:Consolas,monospace;
              color:rgb(189,19,152); font-size:11pt"><span
                style="color:rgb(189,19,152)"></authorization></span></span><br
              style="font-family:Consolas,monospace;
              color:rgb(189,19,152); font-size:11pt">
            <br style="font-family:Consolas,monospace;
              color:rgb(189,19,152); font-size:11pt">
            Best Regards,<br>
            Aivo Kuhlberg<br>
          </p>
          <br>
          <hr>
          <font face="Arial" color="Gray" size="2">Käesolev e-kiri võib
            sisaldada asutusesiseseks kasutamiseks tunnistatud teavet.<br>
            This e-mail may contain information which is classified for
            official use.</font> </div>
      </div>
      <br>
      <hr>
      <font face="Arial" color="Gray" size="2">Käesolev e-kiri võib
        sisaldada asutusesiseseks kasutamiseks tunnistatud teavet.<br>
        This e-mail may contain information which is classified for
        official use.</font>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">_______________________________________________
midPoint mailing list
<a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
    </blockquote>
    <br>
  </body>
</html>