<div dir="auto"><p style="font-family:sans-serif;font-size:12.8px">Hello,<u></u><u></u></p><p style="font-family:sans-serif;font-size:12.8px"><u></u> <u></u></p><p style="font-family:sans-serif;font-size:12.8px">I wrote the role below which includes an authorization that allows a user to read the “History” tab of an organization object. But when the user assigned to this role is trying to click on the “History” tab of an organization, I get a 500 error with the log attached basically saying that the user “is not authorized for operation <a href="http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#auditRead" style="text-decoration-line:none;color:rgb(66,133,244)" target="_blank" rel="noreferrer">http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#auditRead</a>”.<u></u><u></u></p><p style="font-family:sans-serif;font-size:12.8px"><u></u> <u></u></p><p style="font-family:sans-serif;font-size:12.8px">When I remove the restriction <object><type>OrgType</type></object>, then the authorization works fine.<u></u><u></u></p><p style="font-family:sans-serif;font-size:12.8px"><u></u> <u></u></p><p style="font-family:sans-serif;font-size:12.8px">Is this a bug I should report in Jira? The closest issue I found in Jira is the MID-5527.<u></u><u></u></p><p style="font-family:sans-serif;font-size:12.8px"><u></u> <u></u></p><p style="font-family:sans-serif;font-size:12.8px"><role><u></u><u></u></p><p style="font-family:sans-serif;font-size:12.8px">…<u></u><u></u></p><p style="font-family:sans-serif;font-size:12.8px"><authorization><u></u><u></u></p><p style="font-family:sans-serif;font-size:12.8px">        <name>Audit read authorization for organizations</name><u></u><u></u></p><p style="font-family:sans-serif;font-size:12.8px">        <description><u></u><u></u></p><p style="font-family:sans-serif;font-size:12.8px">            Authorization to read the history of an organization.<u></u><u></u></p><p style="font-family:sans-serif;font-size:12.8px">        </description><u></u><u></u></p><p style="font-family:sans-serif;font-size:12.8px">        <action><a href="http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#auditRead" style="text-decoration-line:none;color:rgb(66,133,244)" target="_blank" rel="noreferrer">http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#auditRead</a></action><u></u><u></u></p><p style="font-family:sans-serif;font-size:12.8px">        <object><u></u><u></u></p><p style="font-family:sans-serif;font-size:12.8px">            <type>OrgType</type><u></u><u></u></p><p style="font-family:sans-serif;font-size:12.8px">        </object><u></u><u></u></p><p style="font-family:sans-serif;font-size:12.8px"></authorization><u></u><u></u></p><p style="font-family:sans-serif;font-size:12.8px">…<u></u><u></u></p><p style="font-family:sans-serif;font-size:12.8px"></role></p></div>