<div dir="ltr">I have end user authorization issue with method midpoint.getObject(ShadowType, shadowOid). I have metarole with condition where i am using that method and getting error following error:<div>Expression error: com.evolveum.midpoint.util.exception.AuthorizationException: Access denied in expression in mapping in condition in assignment role</div><div><br></div><div>I have set authorization but it did not help (see below). Any idea which authorization is needed for method 

midpoint.getObject() ?</div><div> </div><div>  <authorization id="45"></div><div>        <name>my-authorization-1</name><br>        <action><a href="http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#read">http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#read</a></action><br>        <action><a href="http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#search">http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#search</a></action><br>        <object id="24"><br>            <type>ResourceType</type><br>        </object><br>        <object id="37"><br>            <type>ShadowType</type><br>        </object><br>        <object id="25"><br>            <type>RoleType</type><br>        </object><br>        <object id="44"><br>            <type>UserType</type><br>        </object><br>    </authorization><br></div><div><br></div><div>Thank you very much</div><div>Regards</div><div>Lubomir Odlevak</div></div>