<div dir="ltr"><div>Hi Kate,</div><div>Do you have any updates for me? Did you reproduce my issue?</div><div>Will be very appreciated for any feedback. <br></div><div><br></div><div><br></div><div><br></div></div><br><div class="gmail_quote"><div dir="ltr">On Tue, 31 Jul 2018 at 19:48, Oleksandr Nekriach <<a href="mailto:o.nekriach@dynatech.lv">o.nekriach@dynatech.lv</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div>Hi Kate,</div><div>Please find in attach authorization roles xml you asked<br></div><div>Thanks to these roles user able to see all roles via assignment window in User profile but has restricted view (as expected) in Request role tab.</div><div><br></div><div>Best regards, Oleksandr</div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On 30 July 2018 at 10:08, Kate Honchar <span dir="ltr"><<a href="mailto:kate.honchar@evolveum.com" target="_blank">kate.honchar@evolveum.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div style="font-family:times new roman,new york,times,serif;font-size:12pt;color:#000000"><div><span style="background-color:#fdfdfd">Oleksandr, hi</span></div><div><span style="background-color:#fdfdfd">Could you send me please the role xml. I'll have a look.</span></div><div><span style="background-color:#fdfdfd"><br></span></div><div><span style="background-color:#fdfdfd">Best regards,</span></div><div><span style="background-color:#fdfdfd">Kate</span></div><div><br></div><hr id="m_-1449141802877021165m_-6445749574703866668zwchr"><div style="color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt"><b>From: </b>"Oleksandr Nekriach" <<a href="mailto:o.nekriach@dynatech.lv" target="_blank">o.nekriach@dynatech.lv</a>><br><b>To: </b>"midPoint General Discussion" <<a href="mailto:midpoint@lists.evolveum.com" target="_blank">midpoint@lists.evolveum.com</a>>, "Kate Honchar" <<a href="mailto:kate.honchar@evolveum.com" target="_blank">kate.honchar@evolveum.com</a>><br><b>Sent: </b>Monday, July 23, 2018 9:13:01 AM<div><div class="m_-1449141802877021165h5"><br><b>Subject: </b>Re: [midPoint] Authorization restriction to some certain objects in Assignments window in User profile<br><div><br></div><div dir="ltr"><div>Kate, thank you for clarification of aiming #adminAssign and #adminUnassign authorizations.</div><div>About your question, a user has no other authorization roles. When I add or remove some roles in authorization section I see these changes in <br></div><div><div class="m_-1449141802877021165m_-6445749574703866668gmail-navbar-title"><span class="m_-1449141802877021165m_-6445749574703866668gmail-page-title">Request roles tab but in the "Assignments" window in the User profile, I still see all roles available in the system.</span></div><div class="m_-1449141802877021165m_-6445749574703866668gmail-navbar-ajax"><br></div></div><div><br></div><div>Best regards, Oleksandr<br></div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On 11 July 2018 at 12:29, Kate Honchar <span dir="ltr"><<a href="mailto:kate.honchar@evolveum.com" target="_blank">kate.honchar@evolveum.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div style="font-family:times new roman,new york,times,serif;font-size:12pt;color:#000000"><div>Oleksandr,<br></div><div>#adminAssign and #adminUnassign authorizations should not be used with target object filter. They are only about displaying/hiding a button.</div><div>Does the user have another roles which probably could give him authorization to assign more roles?</div><div>What if you use just one filter for assignment target object? e.g. use just <span style="font-family:Helvetica,Arial,sans-serif"> <authorization id="24"> and disable for a while <span style="font-family:Helvetica,Arial,sans-serif"><authorization id="20">. Is there any effect?</span></span></div><div><br></div><div>Best regards</div><div>Kate</div><div><br></div><hr id="m_-1449141802877021165m_-6445749574703866668m_6991852262078539416zwchr"><div style="color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt"><span><b>From: </b>"Oleksandr Nekriach" <<a href="mailto:o.nekriach@dynatech.lv" target="_blank">o.nekriach@dynatech.lv</a>><br><b>To: </b>"midPoint General Discussion" <<a href="mailto:midpoint@lists.evolveum.com" target="_blank">midpoint@lists.evolveum.com</a>><br></span><b>Sent: </b>Wednesday, July 11, 2018 9:01:53 AM<div><div class="m_-1449141802877021165m_-6445749574703866668h5"><br><b>Subject: </b>Re: [midPoint] Authorization restriction to some certain objects in Assignments window in User profile<br><div><br></div><div dir="ltr"><div>Hi Kate,</div><div><span id="m_-1449141802877021165m_-6445749574703866668m_6991852262078539416gmail-result_box" class="m_-1449141802877021165m_-6445749574703866668m_6991852262078539416gmail-short_text" lang="en"><span class="m_-1449141802877021165m_-6445749574703866668m_6991852262078539416gmail-">Of course, I combine #assign #unassign with #adminAssign #adminAssign #adminUnassign<br></span></span></div><div><span id="m_-1449141802877021165m_-6445749574703866668m_6991852262078539416gmail-result_box" class="m_-1449141802877021165m_-6445749574703866668m_6991852262078539416gmail-short_text" lang="en"><span class="m_-1449141802877021165m_-6445749574703866668m_6991852262078539416gmail-"><span id="m_-1449141802877021165m_-6445749574703866668m_6991852262078539416gmail-result_box" class="m_-1449141802877021165m_-6445749574703866668m_6991852262078539416gmail-short_text" lang="en"><span class="m_-1449141802877021165m_-6445749574703866668m_6991852262078539416gmail-">But It hides </span></span>unwilling roles from Request role tab and does not hide them from <span id="m_-1449141802877021165m_-6445749574703866668m_6991852262078539416gmail-result_box" class="m_-1449141802877021165m_-6445749574703866668m_6991852262078539416gmail-short_text" lang="en"><span class="m_-1449141802877021165m_-6445749574703866668m_6991852262078539416gmail-">adminAssign</span></span> window.<br></span></span></div><div><span id="m_-1449141802877021165m_-6445749574703866668m_6991852262078539416gmail-result_box" class="m_-1449141802877021165m_-6445749574703866668m_6991852262078539416gmail-short_text" lang="en"><span class="m_-1449141802877021165m_-6445749574703866668m_6991852262078539416gmail-"></span></span><br></div><div>Here is some example</div><div><br></div><div> <authorization id="24"><br> <action><a href="http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#assign" target="_blank">http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#assign</a></action><br> <action><a href="http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#unassign" target="_blank">http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#unassign</a></action><br> <object id="25"><br> <type>UserType</type><br> </object><br> <target id="26"><br> <type>RoleType</type><br> <filter><br> <q:equal><br> <q:path>name</q:path><br> <q:value>End user</q:value><br> </q:equal><br> </filter><br> </target><br> </authorization><br></div><div><authorization id="20"><br> <action><a href="http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#assign" target="_blank">http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#assign</a></action><br> <action><a href="http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#unassign" target="_blank">http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#unassign</a></action><br> <object id="17"><br> <type>UserType</type><br> </object><br> <target id="18"><br> <type>RoleType</type><br> <filter><br> <q:substring><br> <q:path>name</q:path><br> <q:value>Role-</q:value><br> <q:anchorStart>true</q:anchorStart><br> </q:substring><br> </filter><br> </target><br> </authorization><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On 11 July 2018 at 00:12, Kate Honchar <span dir="ltr"><<a href="mailto:kate.honchar@evolveum.com" target="_blank">kate.honchar@evolveum.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div style="font-family:times new roman,new york,times,serif;font-size:12pt;color:#000000"><div>Oleksandr, hi</div><div>The authorizations you use are really about GUI part, so they control either user sees plus button to assign new assignment (and minus button to unassign) or not.</div><div>To control the list of target objects for the new assignment, please, use the authorization</div><div><br></div><div><pre style="background-color:#ffffff;font-family:'DejaVu Sans Mono';font-size:11.3pt"><span style="background-color:#efefef"><</span><span style="color:#000080;background-color:#efefef;font-weight:bold">action</span><span style="background-color:#efefef">></span><a href="http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#assign" target="_blank">http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#assign</a><span style="background-color:#efefef"></</span><span style="color:#000080;background-color:#efefef;font-weight:bold">action</span><span style="background-color:#efefef">><br></span></pre><div><br></div><pre style="background-color:#ffffff;font-family:'DejaVu Sans Mono';font-size:11.3pt"><span style="background-color:#efefef"></span>To give right for the unassigning operation, pls, use<br><span style="background-color:#efefef"><</span><span style="color:#000080;background-color:#efefef;font-weight:bold">action</span><span style="background-color:#efefef">></span><a href="http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#unassign" target="_blank">http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#unassign</a><span style="background-color:#efefef"></</span><span style="color:#000080;background-color:#efefef;font-weight:bold">action</span><span style="background-color:#efefef">><br></span></pre><div><br></div><pre style="background-color:#ffffff;font-family:'DejaVu Sans Mono';font-size:11.3pt"><span style="background-color:#efefef">Best regards.<br>Kate.</span></pre></div><hr id="m_-1449141802877021165m_-6445749574703866668m_6991852262078539416m_-2068381172182654688zwchr"><div style="color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt"><b>From: </b>"Oleksandr Nekriach" <<a href="mailto:o.nekriach@dynatech.lv" target="_blank">o.nekriach@dynatech.lv</a>><br><b>To: </b>"midPoint General Discussion" <<a href="mailto:midpoint@lists.evolveum.com" target="_blank">midpoint@lists.evolveum.com</a>><br><b>Sent: </b>Tuesday, July 10, 2018 3:29:41 PM<br><b>Subject: </b>Re: [midPoint] Authorization restriction to some certain objects in Assignments window in User profile<div><div class="m_-1449141802877021165m_-6445749574703866668m_6991852262078539416h5"><br><div><br></div><div dir="ltr"><div>I am toking about the green "plus" icon button on Assignment tab in User profile which opens "Select object window". I am trying to restrict list of Roles which are available for assignment in this window.</div><div>In the first case I see the button and see all Roles.</div><div>In the second case the button disappears after applying any filter.<br></div><div><br></div><div><div><img src="cid:ii_jjfq35ve0_1648459304a86dd6" width="562" height="397"><br></div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On 10 July 2018 at 15:52, Ivan Noris <span dir="ltr"><<a href="mailto:ivan.noris@evolveum.com" target="_blank">ivan.noris@evolveum.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><p>Can you attach a portion of screen so that I know what exactly is missing? I would say this would be some missing gui authorization, but I would like to see the screenshot with indication what is missing.</p><p><br></p><p>Thank you!</p><p>Ivan<br></p><div><div class="m_-1449141802877021165m_-6445749574703866668m_6991852262078539416m_-2068381172182654688h5"><br><div class="m_-1449141802877021165m_-6445749574703866668m_6991852262078539416m_-2068381172182654688m_6813828049708359947moz-cite-prefix">On 10.07.2018 10:06, Oleksandr Nekriach wrote:<br></div><blockquote><div dir="ltr"><div>Ivan,</div><div>When I add some target section with filter adminAssign button disappear.</div><div>Do you have some working example to understand what I am doing in a wrong way?</div><div><br></div><div>See the button but also see <span id="m_-1449141802877021165m_-6445749574703866668m_6991852262078539416m_-2068381172182654688m_6813828049708359947gmail-result_box" class="m_-1449141802877021165m_-6445749574703866668m_6991852262078539416m_-2068381172182654688m_6813828049708359947gmail-short_text" lang="en"><span class="m_-1449141802877021165m_-6445749574703866668m_6991852262078539416m_-2068381172182654688m_6813828049708359947gmail-">the all roles</span></span><br></div><div> <authorization><br> <name>AssignGUI</name><br> <action><a href="http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#adminAssign" target="_blank">http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#adminAssign</a></action><br> <action><a href="http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#adminUnassign" target="_blank">http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#adminUnassign</a></action><br> <description>Assign/unassign in admin GUI (role profile)</description><br> <object><br> <type>UserType</type><br> </object><br> </authorization><br></div><div><br></div><div><br></div><div>Don't see button at all</div><div><br></div><div> <authorization><br> <name>AssignGUI</name><br> <action><a href="http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#adminAssign" target="_blank">http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#adminAssign</a></action><br> <action><a href="http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#adminUnassign" target="_blank">http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#adminUnassign</a></action><br> <description>Assign/unassign in admin GUI (role profile)</description><br> <object><br> <type>UserType</type><br> </object><br> <target><br> <filter><br> <q:type><br> <q:type>c:RoleType</q:type><br> <q:filter><br> <q:substring><br> <q:matching>polyStringNorm</q:matching><br> <q:path>name</q:path><br> <q:value>Role</q:value><br> <q:anchorStart>true</q:anchorStart><br> </q:substring><br> </q:filter><br> </q:type><br> </filter><br> </target><br> </authorization><br></div><div><br></div><div><br></div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On 10 July 2018 at 09:22, Oleksandr Nekriach <span dir="ltr"><<a href="mailto:o.nekriach@dynatech.lv" target="_blank">o.nekriach@dynatech.lv</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hi Ivan, thank you.<br></div><div class="m_-1449141802877021165m_-6445749574703866668m_6991852262078539416m_-2068381172182654688m_6813828049708359947HOEnZb"><div class="m_-1449141802877021165m_-6445749574703866668m_6991852262078539416m_-2068381172182654688m_6813828049708359947h5"><div class="gmail_extra"><br><div class="gmail_quote">On 9 July 2018 at 22:08, Ivan Noris <span dir="ltr"><<a href="mailto:ivan.noris@evolveum.com" target="_blank">ivan.noris@evolveum.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><p>Hi Oleksandr,</p><p>please see the referenced jira issue with example that I reported earlier and was fixed meanwhile.</p><p><a class="m_-1449141802877021165m_-6445749574703866668m_6991852262078539416m_-2068381172182654688m_6813828049708359947m_-3119986974800006898m_5979460915336450373moz-txt-link-freetext" href="https://jira.evolveum.com/browse/MID-3615" target="_blank">https://jira.evolveum.com/browse/MID-3615</a></p><p>Maybe you're only missing the q:matching element. Or target; as assign/unassign are target-aware.<br></p><p>Best regards,</p><p>Ivan<br></p><div><div class="m_-1449141802877021165m_-6445749574703866668m_6991852262078539416m_-2068381172182654688m_6813828049708359947m_-3119986974800006898h5"><br><div class="m_-1449141802877021165m_-6445749574703866668m_6991852262078539416m_-2068381172182654688m_6813828049708359947m_-3119986974800006898m_5979460915336450373moz-cite-prefix">On 06.07.2018 13:54, Oleksandr Nekriach wrote:<br></div></div></div><blockquote><div><div class="m_-1449141802877021165m_-6445749574703866668m_6991852262078539416m_-2068381172182654688m_6813828049708359947m_-3119986974800006898h5"><div dir="ltr"><div>Hello, <br></div><div>I am stuck. Is it possible to restrict access to some certain objects only (role with Role- prefix only e.g) in Assignments window in User profile .</div><div>Something like this but this example does not work.<br></div><div><br></div><div> <authorization><br> <name>AssignGUI</name><br> <action><a href="http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#adminAssign" target="_blank">http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#adminAssign</a></action><br> <action><a href="http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#adminUnassign" target="_blank">http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#adminUnassign</a></action><br> <description>Assign/unassign in admin GUI (role profile)</description><br> <c:object><br> <c:type>RoleType</c:type><br> </c:object><br> <filter><br> <q:substring><br> <q:path>name</q:path><br> <q:value>Role-</q:value><br> <q:anchorStart>true</q:anchorStart><br> </q:substring><br> </filter><br> </authorization><br></div><div><br></div><div><br></div><div><br></div><div><br></div><br> -- <br><div class="m_-1449141802877021165m_-6445749574703866668m_6991852262078539416m_-2068381172182654688m_6813828049708359947m_-3119986974800006898m_5979460915336450373gmail_signature"><div dir="ltr"><span style="color:rgb(76,76,76)"><span style="color:rgb(76,76,76)">Best regards, <br> <br> <img src="cid:part10.4C91FC3C.278799CC@evolveum.com"> <br> <br> Oleksandr Nekriach | Identity and access management engineer <br> <br> Dynatech, <a href="https://maps.google.com/?q=Mednieku+str.+4a,+Riga,+LV-1010,+Latvia&entry=gmail&source=g" target="_blank">Mednieku str. 4a, Riga, LV-1010, Latvia</a> <br> <br></span></span><div style="display:inline-block"><a href="tel:+371%2025%20314%20685" target="_blank">+37125314685</a></div><span style="color:rgb(76,76,76)"><span style="color:rgb(76,76,76)">,</span></span><div style="display:inline-block"><a href="mailto:o.nekriach@dynatech.lv" target="_blank">o.nekriach@dynatech.lv</a></div><span style="color:rgb(76,76,76)"><span style="color:rgb(76,76,76)">|</span></span><div style="display:inline-block"><a href="http://www.dynatech.lv" target="_blank">www.dynatech.lv</a></div><span style="color:rgb(76,76,76)"><span style="color:rgb(76,76,76)"><br> <br> Stay connected: <br></span></span><div style="display:inline-block;margin:5px 5px 0px 0px"><a href="https://www.facebook.com/DynatechLatvia/?ref=br_rs" target="_blank"><img src="cid:part15.0C6B3F4C.D1AAA85F@evolveum.com"></a></div><div style="display:inline-block;margin:5px 0px 0px"><a href="https://www.linkedin.com/company-beta/17893047/" target="_blank"><img src="cid:part17.1C7C67F8.8C81F717@evolveum.com"></a></div><span style="color:rgb(76,76,76)"><br> <br> <span style="font-size:11px;color:rgb(161,161,161)">Confidentiality Notice: This message contains confidential information and is intended only for the named recipient(s). If you are not the addressee you may not copy, distribute or perform any other activities with this information. If you have received this transmission in error, please notify us by e-mail immediately. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses.</span></span></div></div></div><br><fieldset class="m_-1449141802877021165m_-6445749574703866668m_6991852262078539416m_-2068381172182654688m_6813828049708359947m_-3119986974800006898m_5979460915336450373mimeAttachmentHeader"></fieldset><br></div></div><pre>_______________________________________________
midPoint mailing list
<a class="m_-1449141802877021165m_-6445749574703866668m_6991852262078539416m_-2068381172182654688m_6813828049708359947m_-3119986974800006898m_5979460915336450373moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a class="m_-1449141802877021165m_-6445749574703866668m_6991852262078539416m_-2068381172182654688m_6813828049708359947m_-3119986974800006898m_5979460915336450373moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><span class="m_-1449141802877021165m_-6445749574703866668m_6991852262078539416m_-2068381172182654688m_6813828049708359947m_-3119986974800006898HOEnZb"><span style="color:#888888">
</span></span></pre><span class="m_-1449141802877021165m_-6445749574703866668m_6991852262078539416m_-2068381172182654688m_6813828049708359947m_-3119986974800006898HOEnZb"><span style="color:#888888"> </span></span></blockquote><span class="m_-1449141802877021165m_-6445749574703866668m_6991852262078539416m_-2068381172182654688m_6813828049708359947m_-3119986974800006898HOEnZb"><span class="m_-1449141802877021165m_-6445749574703866668m_6991852262078539416m_-2068381172182654688m_6813828049708359947m_-3119986974800006898HOEnZb"><span style="color:#888888"> <br></span></span></span><pre class="m_-1449141802877021165m_-6445749574703866668m_6991852262078539416m_-2068381172182654688m_6813828049708359947m_-3119986974800006898m_5979460915336450373moz-signature">--
Ivan Noris
Senior Identity Engineer
<a href="http://evolveum.com" target="_blank">evolveum.com</a>
</pre></div><br> _______________________________________________<br> midPoint mailing list<br> <a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br> <a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br> <br></blockquote></div><br> <br clear="all"> <br> -- <br><div class="m_-1449141802877021165m_-6445749574703866668m_6991852262078539416m_-2068381172182654688m_6813828049708359947m_-3119986974800006898gmail_signature"><div dir="ltr"><span style="color:#4c4c4c"><span style="color:#4c4c4c">Best regards, <br> <br> <img src="cid:part10.4C91FC3C.278799CC@evolveum.com"> <br> <br> Oleksandr Nekriach | Identity and access management engineer <br> <br> Dynatech, <a href="https://maps.google.com/?q=Mednieku+str.+4a,+Riga,+LV-1010,+Latvia&entry=gmail&source=g" target="_blank">Mednieku str. 4a, Riga, LV-1010, Latvia</a> <br> <br></span></span><div style="display:inline-block"><a href="tel:+371%2025%20314%20685" target="_blank">+37125314685</a></div><span style="color:#4c4c4c"><span style="color:#4c4c4c">,</span></span><div style="display:inline-block"><a href="mailto:o.nekriach@dynatech.lv" target="_blank">o.nekriach@dynatech.lv</a></div><span style="color:#4c4c4c"><span style="color:#4c4c4c">|</span></span><div style="display:inline-block"><a href="http://www.dynatech.lv" target="_blank">www.dynatech.lv</a></div><span style="color:#4c4c4c"><span style="color:#4c4c4c"><br> <br> Stay connected: <br></span></span><div style="display:inline-block;margin:5px 5px 0 0"><a href="https://www.facebook.com/DynatechLatvia/?ref=br_rs" target="_blank"><img src="cid:part15.0C6B3F4C.D1AAA85F@evolveum.com"></a></div><div style="display:inline-block;margin:5px 0 0 0"><a href="https://www.linkedin.com/company-beta/17893047/" target="_blank"><img src="cid:part17.1C7C67F8.8C81F717@evolveum.com"></a></div><span style="color:#4c4c4c"><br> <br> <span style="font-size:11px;color:#a1a1a1">Confidentiality Notice: This message contains confidential information and is intended only for the named recipient(s). If you are not the addressee you may not copy, distribute or perform any other activities with this information. If you have received this transmission in error, please notify us by e-mail immediately. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses.</span></span></div></div></div></div></div></blockquote></div><br> <br clear="all"> <br> -- <br><div class="m_-1449141802877021165m_-6445749574703866668m_6991852262078539416m_-2068381172182654688m_6813828049708359947gmail_signature"><div dir="ltr"><span style="color:#4c4c4c"><span style="color:#4c4c4c">Best regards, <br> <br> <img src="cid:part10.4C91FC3C.278799CC@evolveum.com"> <br> <br> Oleksandr Nekriach | Identity and access management engineer <br> <br> Dynatech, <a href="https://maps.google.com/?q=Mednieku+str.+4a,+Riga,+LV-1010,+Latvia&entry=gmail&source=g" target="_blank">Mednieku str. 4a, Riga, LV-1010, Latvia</a> <br> <br></span></span><div style="display:inline-block"><a href="tel:+371%2025%20314%20685" target="_blank">+37125314685</a></div><span style="color:#4c4c4c"><span style="color:#4c4c4c">,</span></span><div style="display:inline-block"><a href="mailto:o.nekriach@dynatech.lv" target="_blank">o.nekriach@dynatech.lv</a></div><span style="color:#4c4c4c"><span style="color:#4c4c4c">|</span></span><div style="display:inline-block"><a href="http://www.dynatech.lv" target="_blank">www.dynatech.lv</a></div><span style="color:#4c4c4c"><span style="color:#4c4c4c"><br> <br> Stay connected: <br></span></span><div style="display:inline-block;margin:5px 5px 0 0"><a href="https://www.facebook.com/DynatechLatvia/?ref=br_rs" target="_blank"><img src="cid:part15.0C6B3F4C.D1AAA85F@evolveum.com"></a></div><div style="display:inline-block;margin:5px 0 0 0"><a href="https://www.linkedin.com/company-beta/17893047/" target="_blank"><img src="cid:part17.1C7C67F8.8C81F717@evolveum.com"></a></div><span style="color:#4c4c4c"><br> <br> <span style="font-size:11px;color:#a1a1a1">Confidentiality Notice: This message contains confidential information and is intended only for the named recipient(s). If you are not the addressee you may not copy, distribute or perform any other activities with this information. If you have received this transmission in error, please notify us by e-mail immediately. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses.</span></span></div></div></div><br><fieldset class="m_-1449141802877021165m_-6445749574703866668m_6991852262078539416m_-2068381172182654688m_6813828049708359947mimeAttachmentHeader"></fieldset><br><pre>_______________________________________________
midPoint mailing list
<a class="m_-1449141802877021165m_-6445749574703866668m_6991852262078539416m_-2068381172182654688m_6813828049708359947moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a class="m_-1449141802877021165m_-6445749574703866668m_6991852262078539416m_-2068381172182654688m_6813828049708359947moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre></blockquote><br><pre class="m_-1449141802877021165m_-6445749574703866668m_6991852262078539416m_-2068381172182654688m_6813828049708359947moz-signature">--
Ivan Noris
Senior Identity Engineer
<a href="http://evolveum.com" target="_blank">evolveum.com</a>
</pre></div></div></div><br>_______________________________________________<br> midPoint mailing list<br> <a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br> <a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br> <br></blockquote></div><br><br clear="all"><br>-- <br><div class="m_-1449141802877021165m_-6445749574703866668m_6991852262078539416m_-2068381172182654688gmail_signature"><div dir="ltr"><span style="color:#4c4c4c"><span style="color:#4c4c4c">Best regards, <br></span></span><div><br></div><span style="color:#4c4c4c"><span style="color:#4c4c4c"><img src="cid:o.nekriach@dynatech.lv1520941785292-7770"> <br></span></span><div><br></div><span style="color:#4c4c4c"><span style="color:#4c4c4c">Oleksandr Nekriach | Identity and access management engineer <br></span></span><div><br></div><span style="color:#4c4c4c"><span style="color:#4c4c4c">Dynatech, <a href="https://maps.google.com/?q=Mednieku+str.+4a,+Riga,+LV-1010,+Latvia&entry=gmail&source=g" target="_blank">Mednieku str. 4a, Riga, LV-1010, Latvia</a> <br></span></span><div><br></div><div style="display:inline-block"><a href="tel:+371%2025%20314%20685" target="_blank">+37125314685</a></div><span style="color:#4c4c4c"><span style="color:#4c4c4c">,</span></span><div style="display:inline-block"><a href="mailto:o.nekriach@dynatech.lv" target="_blank">o.nekriach@dynatech.lv</a></div><span style="color:#4c4c4c"><span style="color:#4c4c4c">|</span></span><div style="display:inline-block"><a href="http://www.dynatech.lv" target="_blank">www.dynatech.lv</a></div><span style="color:#4c4c4c"><span style="color:#4c4c4c"><br></span></span><div><br></div><span style="color:#4c4c4c"><span style="color:#4c4c4c">Stay connected: <br></span></span><div style="display:inline-block;margin:5px 5px 0 0"><a href="https://www.facebook.com/DynatechLatvia/?ref=br_rs" target="_blank"><img src="cid:o.nekriach@dynatech.lv1520941785292-7771"></a></div><div style="display:inline-block;margin:5px 0 0 0"><a href="https://www.linkedin.com/company-beta/17893047/" target="_blank"><img src="cid:o.nekriach@dynatech.lv1520941785292-7772"></a></div><span style="color:#4c4c4c"><span style="color:#4c4c4c"><br></span></span><div><br></div><span style="color:#4c4c4c"><span style="font-size:11px;color:#a1a1a1">Confidentiality Notice: This message contains confidential information and is intended only for the named recipient(s). If you are not the addressee you may not copy, distribute or perform any other activities with this information. If you have received this transmission in error, please notify us by e-mail immediately. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses.</span></span></div></div></div><br>_______________________________________________<br>midPoint mailing list<br><a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br><a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br></div></div></div><div><br></div></div></div><br>_______________________________________________<br> midPoint mailing list<br> <a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br> <a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br> <br></blockquote></div><br><br clear="all"><br>-- <br><div class="m_-1449141802877021165m_-6445749574703866668m_6991852262078539416gmail_signature"><div dir="ltr"><span style="color:#4c4c4c"><span style="color:#4c4c4c">Best regards, <br></span></span><div><br></div><span style="color:#4c4c4c"><span style="color:#4c4c4c"><img src="cid:o.nekriach@dynatech.lv1520941785292-7770"> <br></span></span><div><br></div><span style="color:#4c4c4c"><span style="color:#4c4c4c">Oleksandr Nekriach | Identity and access management engineer <br></span></span><div><br></div><span style="color:#4c4c4c"><span style="color:#4c4c4c">Dynatech, <a href="https://maps.google.com/?q=Mednieku+str.+4a,+Riga,+LV-1010,+Latvia&entry=gmail&source=g" target="_blank">Mednieku str. 4a, Riga, LV-1010, Latvia</a> <br></span></span><div><br></div><div style="display:inline-block"><a href="tel:+371%2025%20314%20685" target="_blank">+37125314685</a></div><span style="color:#4c4c4c"><span style="color:#4c4c4c">,</span></span><div style="display:inline-block"><a href="mailto:o.nekriach@dynatech.lv" target="_blank">o.nekriach@dynatech.lv</a></div><span style="color:#4c4c4c"><span style="color:#4c4c4c">|</span></span><div style="display:inline-block"><a href="http://www.dynatech.lv" target="_blank">www.dynatech.lv</a></div><span style="color:#4c4c4c"><span style="color:#4c4c4c"><br></span></span><div><br></div><span style="color:#4c4c4c"><span style="color:#4c4c4c">Stay connected: <br></span></span><div style="display:inline-block;margin:5px 5px 0 0"><a href="https://www.facebook.com/DynatechLatvia/?ref=br_rs" target="_blank"><img src="cid:o.nekriach@dynatech.lv1520941785292-7771"></a></div><div style="display:inline-block;margin:5px 0 0 0"><a href="https://www.linkedin.com/company-beta/17893047/" target="_blank"><img src="cid:o.nekriach@dynatech.lv1520941785292-7772"></a></div><span style="color:#4c4c4c"><span style="color:#4c4c4c"><br></span></span><div><br></div><span style="color:#4c4c4c"><span style="font-size:11px;color:#a1a1a1">Confidentiality Notice: This message contains confidential information and is intended only for the named recipient(s). If you are not the addressee you may not copy, distribute or perform any other activities with this information. If you have received this transmission in error, please notify us by e-mail immediately. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses.</span></span></div></div></div><br>_______________________________________________<br>midPoint mailing list<br><a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br><a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br></div></div></div><div><br></div></div></div><br>_______________________________________________<br> midPoint mailing list<br> <a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br> <a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br> <br></blockquote></div><br><br clear="all"><br>-- <br><div class="m_-1449141802877021165m_-6445749574703866668gmail_signature"><div dir="ltr"><span style="color:#4c4c4c"><span style="color:#4c4c4c">Best regards, <br></span></span><div><br></div><span style="color:#4c4c4c"><span style="color:#4c4c4c"><img src="cid:o.nekriach@dynatech.lv1520941785292-7770"> <br></span></span><div><br></div><span style="color:#4c4c4c"><span style="color:#4c4c4c">Oleksandr Nekriach | Identity and access management engineer <br></span></span><div><br></div><span style="color:#4c4c4c"><span style="color:#4c4c4c">Dynatech, <a href="https://maps.google.com/?q=Mednieku+str.+4a,+Riga,+LV-1010,+Latvia&entry=gmail&source=g" target="_blank">Mednieku str. 4a, Riga, LV-1010, Latvia</a> <br></span></span><div><br></div><div style="display:inline-block"><a href="tel:+371%2025%20314%20685" target="_blank">+37125314685</a></div><span style="color:#4c4c4c"><span style="color:#4c4c4c">,</span></span><div style="display:inline-block"><a href="mailto:o.nekriach@dynatech.lv" target="_blank">o.nekriach@dynatech.lv</a></div><span style="color:#4c4c4c"><span style="color:#4c4c4c">|</span></span><div style="display:inline-block"><a href="http://www.dynatech.lv" target="_blank">www.dynatech.lv</a></div><span style="color:#4c4c4c"><span style="color:#4c4c4c"><br></span></span><div><br></div><span style="color:#4c4c4c"><span style="color:#4c4c4c">Stay connected: <br></span></span><div style="display:inline-block;margin:5px 5px 0 0"><a href="https://www.facebook.com/DynatechLatvia/?ref=br_rs" target="_blank"><img src="cid:o.nekriach@dynatech.lv1520941785292-7771"></a></div><div style="display:inline-block;margin:5px 0 0 0"><a href="https://www.linkedin.com/company-beta/17893047/" target="_blank"><img src="cid:o.nekriach@dynatech.lv1520941785292-7772"></a></div><span style="color:#4c4c4c"><span style="color:#4c4c4c"><br></span></span><div><br></div><span style="color:#4c4c4c"><span style="font-size:11px;color:#a1a1a1">Confidentiality Notice: This message contains confidential information and is intended only for the named recipient(s). If you are not the addressee you may not copy, distribute or perform any other activities with this information. If you have received this transmission in error, please notify us by e-mail immediately. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses.</span></span></div></div></div></div></div></div><div><br></div></div></div></blockquote></div><br><br clear="all"><br>-- <br><div class="m_-1449141802877021165gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><span style="color:#4c4c4c">Best regards, <br><br><img src="cid:o.nekriach@dynatech.lv1520941785292-7770"> <br><br>Oleksandr Nekriach | Identity and access management engineer <br><br>Dynatech, <a href="https://maps.google.com/?q=Mednieku+str.+4a,+Riga,+LV-1010,+Latvia&entry=gmail&source=g" target="_blank">Mednieku str. 4a, Riga, LV-1010, Latvia</a> <br><br><div style="display:inline-block"><a href="tel:+371%2025%20314%20685" value="+37125314685" target="_blank">+37125314685</a></div>, <div style="display:inline-block"><a href="mailto:o.nekriach@dynatech.lv" target="_blank">o.nekriach@dynatech.lv</a></div> | <div style="display:inline-block"><a href="http://www.dynatech.lv" target="_blank">www.dynatech.lv</a></div> <br><br>Stay connected: <br><div style="display:inline-block;margin:5px 5px 0 0"><a href="https://www.facebook.com/DynatechLatvia/?ref=br_rs" target="_blank"><img src="cid:o.nekriach@dynatech.lv1520941785292-7771"></a></div><div style="display:inline-block;margin:5px 0 0 0"><a href="https://www.linkedin.com/company-beta/17893047/" target="_blank"><img src="cid:o.nekriach@dynatech.lv1520941785292-7772"></a></div><br><br><span style="font-size:11px;color:#a1a1a1">Confidentiality
Notice: This message contains confidential information and is intended
only for the named recipient(s). If you are not the addressee you may
not copy, distribute or perform any other activities with this
information. If you have received this transmission in error, please
notify us by e-mail immediately. E-mail transmission cannot be
guaranteed to be secure or error-free as information could be
intercepted, corrupted, lost, destroyed, arrive late or incomplete, or
contain viruses.</span></span></div></div>
</div>
</blockquote></div><br clear="all"><br>-- <br><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><span style="color:rgb(76,76,76)">Best regards, <br><br><img src="cid:o.nekriach@dynatech.lv1520941785292-7770"> <br><br>Oleksandr Nekriach | Identity and access management engineer <br><br>Dynatech, <a href="https://www.google.com/maps/place/DYNATECH/@56.9575205,24.1107235,17z/data=!3m1!4b1!4m5!3m4!1s0x46eecf5753e42351:0x23b120b9745cae62!8m2!3d56.9575205!4d24.1129122" target="_blank">Jeruzalemes iela 1, Rīga, LV-1010, Latvia</a><br><br><div style="display:inline-block"><a href="tel:+371%2025%20314%20685" value="+37125314685" target="_blank">+37125314685</a></div>, <div style="display:inline-block"><a href="mailto:o.nekriach@dynatech.lv" target="_blank">o.nekriach@dynatech.lv</a></div> | <div style="display:inline-block"><a href="http://www.dynatech.lv" target="_blank">www.dynatech.lv</a></div> <br><br>Stay connected: <br><div style="display:inline-block;margin:5px 5px 0px 0px"><a href="https://www.facebook.com/DynatechLatvia/?ref=br_rs" target="_blank"><img src="cid:o.nekriach@dynatech.lv1520941785292-7771"></a></div><div style="display:inline-block;margin:5px 0px 0px"><a href="https://www.linkedin.com/company-beta/17893047/" target="_blank"><img src="cid:o.nekriach@dynatech.lv1520941785292-7772"></a></div><br><br><span style="font-size:11px;color:rgb(161,161,161)">Confidentiality
Notice: This message contains confidential information and is intended
only for the named recipient(s). If you are not the addressee you may
not copy, distribute or perform any other activities with this
information. If you have received this transmission in error, please
notify us by e-mail immediately. E-mail transmission cannot be
guaranteed to be secure or error-free as information could be
intercepted, corrupted, lost, destroyed, arrive late or incomplete, or
contain viruses.</span></span></div></div></div></div>