<span style=" font-size:10pt;font-family:Consolas">Hallo, together</span>
<br>
<br><span style=" font-size:10pt;font-family:Consolas">i have following
trouble</span>
<ol>
<li value=1><span style=" font-size:10pt;font-family:Consolas">i have some
user who act in specific role</span>
<li value=2><span style=" font-size:10pt;font-family:Consolas">user's organizationID
is 94270</span>
<li value=3><span style=" font-size:10pt;font-family:Consolas">and then
i am trying to grant to the user (trough role) rights to read other users
witch belong to same <i>organizationID</i>(<i>organizationID</i>is extended
attribute)</span>
<li value=4></ol><span style=" font-size:10pt;font-family:Consolas">I start
to do it according<br>
</span><a href="https://wiki.evolveum.com/display/midPoint/Authorization+Configuration#AuthorizationConfiguration-ObjectSpecification"><span style=" font-size:10pt;color:blue;font-family:Consolas">https://wiki.evolveum.com/display/midPoint/Authorization+Configuration#AuthorizationConfiguration-ObjectSpecification</span></a>
<br>
<br><span style=" font-size:10pt;font-family:Consolas">and wrote some filtering
inside role-xml <i>(here is simplified one). </i></span>
<br>
<br><span style=" font-size:10pt;font-family:Consolas">BUT, </span>
<ol>
<li value=1><span style=" font-size:10pt;font-family:Consolas">when i log
to midpoint as mentioned user, i see all the Users, regardless the value
of <i>organizationID</i>. </span>
<li value=2><span style=" font-size:10pt;font-family:Consolas">When i do
in UI filtering on <i>organizationID</i>, it works and i see just users
with asked <i>organizationID</i>, </span>
<li value=3><span style=" font-size:10pt;font-family:Consolas">when i add
to object </span><span style=" font-size:10pt;color:#4040c2;font-family:Consolas"><special>self</special>
</span><span style=" font-size:10pt;font-family:Consolas">i see that self
is used</span>
<li value=4></ol><span style=" font-size:10pt;font-family:Consolas">So why
the filter do not work? What I am doing wrong? I tried as well to do it
with script, I logged every user which was filtered. But.. it DO NOT WORK.</span>
<br>
<br><span style=" font-size:10pt;font-family:Consolas"> </span><span style=" font-size:10pt;color:#008080;font-family:Consolas"><</span><span style=" font-size:10pt;color:#3f8080;font-family:Consolas">authorization</span><span style=" font-size:10pt;font-family:Consolas">
</span><span style=" font-size:10pt;color:#800080;font-family:Consolas">id</span><span style=" font-size:10pt;font-family:Consolas">=</span><span style=" font-size:10pt;color:#4200ff;font-family:Consolas"><i>"25"</i></span><span style=" font-size:10pt;color:#008080;font-family:Consolas">></span>
<br><span style=" font-size:10pt;font-family:Consolas">
</span><span style=" font-size:10pt;color:#008080;font-family:Consolas"><</span><span style=" font-size:10pt;color:#3f8080;font-family:Consolas">name</span><span style=" font-size:10pt;color:#008080;font-family:Consolas">></span><span style=" font-size:10pt;font-family:Consolas">[<u>Zamestnanec</u>
XY] EXT/TEMP Some user attributes (read)</span><span style=" font-size:10pt;color:#008080;font-family:Consolas"></</span><span style=" font-size:10pt;color:#3f8080;font-family:Consolas">name</span><span style=" font-size:10pt;color:#008080;font-family:Consolas">></span>
<br><span style=" font-size:10pt;font-family:Consolas">
</span><span style=" font-size:10pt;color:#008080;font-family:Consolas"><</span><span style=" font-size:10pt;color:#3f8080;font-family:Consolas">description</span><span style=" font-size:10pt;color:#008080;font-family:Consolas">></span><span style=" font-size:10pt;font-family:Consolas"><u>Alow</u>
visibility of users attributes (EXT/TEMP)</span><span style=" font-size:10pt;color:#008080;font-family:Consolas"></</span><span style=" font-size:10pt;color:#3f8080;font-family:Consolas">description</span><span style=" font-size:10pt;color:#008080;font-family:Consolas">></span>
<br><span style=" font-size:10pt;font-family:Consolas">
</span><span style=" font-size:10pt;color:#008080;font-family:Consolas"><</span><span style=" font-size:10pt;color:#3f8080;font-family:Consolas">action</span><span style=" font-size:10pt;color:#008080;font-family:Consolas">></span><a href="http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#read"><span style=" font-size:10pt;color:blue;font-family:Consolas">http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#read</span></a><span style=" font-size:10pt;color:#008080;font-family:Consolas"></</span><span style=" font-size:10pt;color:#3f8080;font-family:Consolas">action</span><span style=" font-size:10pt;color:#008080;font-family:Consolas">></span>
<br><span style=" font-size:10pt;font-family:Consolas">
</span><span style=" font-size:10pt;color:#008080;font-family:Consolas"><</span><span style=" font-size:10pt;color:#3f8080;font-family:Consolas">object</span><span style=" font-size:10pt;font-family:Consolas">
</span><span style=" font-size:10pt;color:#800080;font-family:Consolas">id</span><span style=" font-size:10pt;font-family:Consolas">=</span><span style=" font-size:10pt;color:#4200ff;font-family:Consolas"><i>"24"</i></span><span style=" font-size:10pt;color:#008080;font-family:Consolas">></span>
<br><span style=" font-size:10pt;font-family:Consolas">
</span><span style=" font-size:10pt;color:#008080;font-family:Consolas"><</span><span style=" font-size:10pt;color:#3f8080;font-family:Consolas">type</span><span style=" font-size:10pt;color:#008080;font-family:Consolas">></span><span style=" font-size:10pt;font-family:Consolas">UserType</span><span style=" font-size:10pt;color:#008080;font-family:Consolas"></</span><span style=" font-size:10pt;color:#3f8080;font-family:Consolas">type</span><span style=" font-size:10pt;color:#008080;font-family:Consolas">></span>
<br><span style=" font-size:10pt;font-family:Consolas">
</span><span style=" font-size:10pt;color:#008080;font-family:Consolas"><</span><span style=" font-size:10pt;color:#3f8080;font-family:Consolas">filter</span><span style=" font-size:10pt;color:#008080;font-family:Consolas">></span>
<br><span style=" font-size:10pt;font-family:Consolas">
</span><span style=" font-size:10pt;color:#008080;font-family:Consolas"><</span><span style=" font-size:10pt;color:#3f8080;font-family:Consolas">q:equal</span><span style=" font-size:10pt;color:#008080;font-family:Consolas">></span>
<br><span style=" font-size:10pt;font-family:Consolas">
</span><span style=" font-size:10pt;color:#008080;font-family:Consolas"><</span><span style=" font-size:10pt;color:#3f8080;font-family:Consolas">q:path</span><span style=" font-size:10pt;color:#008080;font-family:Consolas">></span><span style=" font-size:10pt;font-family:Consolas">extension/organizationID</span><span style=" font-size:10pt;color:#008080;font-family:Consolas"></</span><span style=" font-size:10pt;color:#3f8080;font-family:Consolas">q:path</span><span style=" font-size:10pt;color:#008080;font-family:Consolas">></span>
<br><span style=" font-size:10pt;font-family:Consolas">
</span><span style=" font-size:10pt;color:#008080;font-family:Consolas"><</span><span style=" font-size:10pt;color:#3f8080;font-family:Consolas">q:value</span><span style=" font-size:10pt;color:#008080;font-family:Consolas">></span><span style=" font-size:10pt;font-family:Consolas">94270</span><span style=" font-size:10pt;color:#008080;font-family:Consolas"></</span><span style=" font-size:10pt;color:#3f8080;font-family:Consolas">q:value</span><span style=" font-size:10pt;color:#008080;font-family:Consolas">></span>
<br><span style=" font-size:10pt;font-family:Consolas">
</span><span style=" font-size:10pt;color:#008080;font-family:Consolas"></</span><span style=" font-size:10pt;color:#3f8080;font-family:Consolas">q:equal</span><span style=" font-size:10pt;color:#008080;font-family:Consolas">></span>
<br><span style=" font-size:10pt;font-family:Consolas">
</span><span style=" font-size:10pt;color:#008080;font-family:Consolas"></</span><span style=" font-size:10pt;color:#3f8080;font-family:Consolas">filter</span><span style=" font-size:10pt;color:#008080;font-family:Consolas">></span>
<br><span style=" font-size:10pt;color:#4040c2;font-family:Consolas"><!--
<special>self</special>
--></span>
<br><span style=" font-size:10pt;font-family:Consolas">
</span><span style=" font-size:10pt;color:#008080;font-family:Consolas"></</span><span style=" font-size:10pt;color:#3f8080;font-family:Consolas">object</span><span style=" font-size:10pt;color:#008080;font-family:Consolas">></span>
<br><span style=" font-size:10pt;font-family:Consolas">
</span><span style=" font-size:10pt;color:#008080;font-family:Consolas"><</span><span style=" font-size:10pt;color:#3f8080;font-family:Consolas">c:item</span><span style=" font-size:10pt;color:#008080;font-family:Consolas">></span><span style=" font-size:10pt;font-family:Consolas">name</span><span style=" font-size:10pt;color:#008080;font-family:Consolas"></</span><span style=" font-size:10pt;color:#3f8080;font-family:Consolas">c:item</span><span style=" font-size:10pt;color:#008080;font-family:Consolas">></span>
<br><span style=" font-size:10pt;font-family:Consolas">
</span><span style=" font-size:10pt;color:#008080;font-family:Consolas"><</span><span style=" font-size:10pt;color:#3f8080;font-family:Consolas">c:item</span><span style=" font-size:10pt;color:#008080;font-family:Consolas">></span><span style=" font-size:10pt;font-family:Consolas"><u>subtype</u></span><span style=" font-size:10pt;color:#008080;font-family:Consolas"></</span><span style=" font-size:10pt;color:#3f8080;font-family:Consolas">c:item</span><span style=" font-size:10pt;color:#008080;font-family:Consolas">></span>
<br><span style=" font-size:10pt;font-family:Consolas">
</span><span style=" font-size:10pt;color:#008080;font-family:Consolas"><</span><span style=" font-size:10pt;color:#3f8080;font-family:Consolas">c:item</span><span style=" font-size:10pt;color:#008080;font-family:Consolas">></span><span style=" font-size:10pt;font-family:Consolas">extension/organizationID</span><span style=" font-size:10pt;color:#008080;font-family:Consolas"></</span><span style=" font-size:10pt;color:#3f8080;font-family:Consolas">c:item</span><span style=" font-size:10pt;color:#008080;font-family:Consolas">></span>
<br><span style=" font-size:10pt;font-family:Consolas"> </span><span style=" font-size:10pt;color:#008080;font-family:Consolas"></</span><span style=" font-size:10pt;color:#3f8080;font-family:Consolas">authorization</span><span style=" font-size:10pt;color:#008080;font-family:Consolas">></span>