<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=koi8-r">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:2.0cm 42.5pt 2.0cm 3.0cm;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="RU" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span lang="EN-US" style="font-size:12.0pt">Good day.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:12.0pt">My name is Maxim and I work in organization that integrate IDM’s.
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:12.0pt">I have a few questions about midPoint Live Demo.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:12.0pt">In the process of working with the demo, I created 3 users (Casey, April and Karai), 1 role (# 01 Role) and 1 organization (TMNT). Casey I assigned a role<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:12.0pt">“Superuser” and its icon turned red.
<span style="color:#C00000">(users.png)</span><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:12.0pt">For # 01 Role, I set the following rules:
<i>Approver - casey: UserType, Inducements - Superuser</i>. For “TMNT” I set the rule:
<i>Inducements - # 01 Role</i>. <span style="color:#C00000">(role.png, org.png)</span><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:12.0pt">1. When “# 01 Role” is assigned for Karai, a request "Approve adding #01 Role to karai" is generated for casey. After approval, she gets SU's rights. But this is not shown anywhere. How to understand
what "</span><span lang="EN-US"> </span><span lang="EN-US" style="font-size:12.0pt">Assignments" pulls other roles?<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:12.0pt">2. When April is assigned to the “TMNT” organization, it
<u>immediately gets</u> the SU's rights, there is no one asking for approval from Casey. Again it is not reflected anywhere that the user has received new rights, only that he is in the organization.
<span style="color:#C00000">(april.png)</span><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:12.0pt">3. I can’t create reports in midPoint Live Demo, get an error
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:12.0pt">“FATAL_ERROR<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:12.0pt">Java.io.FileNotFoundException: / opt / midpoint-home / tmp / swap_20431429_1496041151929 (Permission denied)”
<span style="color:#C00000">(error.png)</span><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:12.0pt;color:black;mso-fareast-language:RU">Respectfully,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:12.0pt;color:black;mso-fareast-language:RU">Maxim Kalshin<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:12.0pt;color:black;mso-fareast-language:RU">Engineer<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:12.0pt;color:black;mso-fareast-language:RU">Department of Access Control Solutions, ELVIS-PLUS<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:12.0pt;color:black;mso-fareast-language:RU">E-mail: m.kalshin@elvis.ru<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black;mso-fareast-language:RU">Tel: +7 (495) 276-02-11 (ext.181)</span><o:p></o:p></p>
</div>
</body>
</html>