<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Hi,</p>
<p>maybe you need to switch off the legacy and default configuration
as you are using policy rules?</p>
<p>In system configuration add:</p>
<p><workflowConfiguration><br>
<useLegacyApproversSpecification>never</useLegacyApproversSpecification><br>
<useDefaultApprovalPolicyRules>never</useDefaultApprovalPolicyRules><br>
</workflowConfiguration><br>
</p>
<p>Please try if it helps to fix your configuration.</p>
<p>Best regards,</p>
<p>Ivan<br>
</p>
<div class="moz-cite-prefix">On 28. 4. 2021 10:29, Loïc SCHAMBER via
midPoint wrote:<br>
</div>
<blockquote type="cite"
cite="mid:VE1PR01MB5725BEC9326BB4F14D2771D6B8409@VE1PR01MB5725.eurprd01.prod.exchangelabs.com">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]-->
<style>@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}@font-face
{font-family:Roboto;
panose-1:2 0 0 0 0 0 0 0 0 0;}p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}div.WordSection1
{page:WordSection1;}</style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal">Hi everyone ,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span lang="EN-GB">I am currently
experiencing a strange behaviour that I struggle to explain.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">I have a
globalPolicyRule that will change the approval policy for
all assignments in order to have the “first decides”
behaviour:<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><approvalSchema><o:p></o:p></span></p>
<p class="MsoNormal" style="text-indent:35.4pt"><span
lang="EN-GB"><stage><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">
<name>Role's approvers</name><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">
<approverRelation>approver</approverRelation><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">
<evaluationStrategy>firstDecides</evaluationStrategy><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">
<outcomeIfNoApprovers>approve</outcomeIfNoApprovers><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">
</stage><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"></approvalSchema><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">In order to apply this
on assignment approval I also specified the following
constraint:<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><policyConstraints><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> <assignment
id="82"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">
<operation>add</operation><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">
</assignment><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"></policyConstraints><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">My globalPolicyRule
works as expected with direct assignment of a role (i.e.
only one approval is required)!<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">However, when we request
the same role through the role shopping, the approval
process is still the default process. (i.e. all approvers
must approve)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">I think it may be a
problem coming from the policyConstraints but I still
struggle to understand what to set (Even with this
documentation
<a
href="https://docs.evolveum.com/midpoint/devel/design/policy-constraints/"
moz-do-not-send="true">https://docs.evolveum.com/midpoint/devel/design/policy-constraints/</a>).<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">May you explain me what
is expected here, I think that going through the role
request is not the same as adding the assignment, but then
what should be the constraint?<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">Thanks a lot for your
help,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">Best Regards.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<table class="MsoNormalTable" cellspacing="0" cellpadding="0"
border="0">
<tbody>
<tr>
<td style="width:141.0pt;border:none;border-right:solid
#FF0044 2.25pt;padding:0cm 7.5pt 0cm 0cm" width="188">
<p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;text-align:right"
align="right">
<a href="https://www.positivethinking.tech/"
moz-do-not-send="true"><span
style="color:blue;mso-fareast-language:FR-CH;text-decoration:none"><img
style="width:1.7708in;height:.8229in"
id="_x0000_i1030"
src="cid:part2.7C0DEA5A.DC98C916@evolveum.com"
alt="logo" class="" width="170" height="79"
border="0"></span></a><span
style="mso-fareast-language:FR-CH"><o:p></o:p></span></p>
</td>
<td style="width:7.5pt;padding:0cm 0cm 0cm 0cm" width="10">
<p class="MsoNormal"><span
style="mso-fareast-language:FR-CH"> <o:p></o:p></span></p>
</td>
<td style="width:372.75pt;padding:0cm 0cm 0cm 0cm"
width="497" valign="top">
<p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b><span
style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:#FF0044;mso-fareast-language:FR-CH"
lang="EN-GB">Loïc Schamber</span></b><span
style="font-size:9.0pt;font-family:"Tahoma",sans-serif;color:#777777;mso-fareast-language:FR-CH"
lang="EN-GB">
</span><span
style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:#777777;mso-fareast-language:FR-CH"
lang="EN-GB"> | IT Consultant<br>
</span><span
style="font-size:9.0pt;font-family:"Tahoma",sans-serif;color:#777777;mso-fareast-language:FR-CH"><a
href="mailto:lschamber@positivethinking.tech"
moz-do-not-send="true"><span style="color:#FF0044"
lang="EN-GB">lschamber@positivethinking.tech</span></a></span><span
style="font-size:9.0pt;font-family:"Tahoma",sans-serif;color:#777777;mso-fareast-language:FR-CH"
lang="EN-GB"><br>
Tel. </span><span
style="font-size:9.0pt;font-family:"Tahoma",sans-serif;color:#777777;mso-fareast-language:FR-CH"><a
href="tel:+41%2022%20721%2007%2077"
moz-do-not-send="true"><span style="color:#FF0044">+41
22 721 07 77</span></a> | Direct.
<a href="tel:+41%2022%20555%2027%2069"
moz-do-not-send="true"><span style="color:#FF0044">+41
22 555 27 69</span></a>
<br>
<o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style="border:none;border-right:solid #FF0044
2.25pt;padding:0cm 7.5pt 0cm 0cm">
<p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;text-align:right"
align="right">
<span style="mso-fareast-language:FR-CH"><br>
</span><a
href="https://www.linkedin.com/company/the-positive-thinking-company/"
target="_blank" moz-do-not-send="true"><span
style="color:blue;mso-fareast-language:FR-CH;text-decoration:none"><img
style="width:.2083in;height:.2083in"
id="_x0000_i1029"
src="cid:part7.BD6EA974.26987B7B@evolveum.com"
alt="LinkedIn" class="" width="20" height="20"
border="0"></span></a><span
style="mso-fareast-language:FR-CH">
</span><a
href="https://www.instagram.com/positivethinkingcompany/"
target="_blank" moz-do-not-send="true"><span
style="color:blue;mso-fareast-language:FR-CH;text-decoration:none"><img
style="width:.2083in;height:.2083in"
id="_x0000_i1028"
src="cid:part9.A40CF30D.C65E3852@evolveum.com"
alt="Instagram" class="" width="20" height="20"
border="0"></span></a><span
style="mso-fareast-language:FR-CH">
</span><a href="https://twitter.com/PTC_Tech"
target="_blank" moz-do-not-send="true"><span
style="color:blue;mso-fareast-language:FR-CH;text-decoration:none"><img
style="width:.2083in;height:.2083in"
id="_x0000_i1027"
src="cid:part11.E91E3BC4.ED1F740D@evolveum.com"
alt="Vimeo" class="" width="20" height="20"
border="0"></span></a><span
style="mso-fareast-language:FR-CH">
</span><a
href="https://youtube.com/channel/UCfaImWa6r0IoZoUYLhbiF7w"
target="_blank" moz-do-not-send="true"><span
style="color:blue;mso-fareast-language:FR-CH;text-decoration:none"><img
style="width:.2083in;height:.2083in"
id="_x0000_i1026"
src="cid:part13.F392405D.048DE66E@evolveum.com"
alt="Vimeo" class="" width="20" height="20"
border="0"></span></a><span
style="mso-fareast-language:FR-CH"><o:p></o:p></span></p>
</td>
<td style="padding:0cm 0cm 0cm 0cm" valign="bottom"><br>
</td>
<td style="padding:0cm 0cm 0cm 0cm" valign="bottom">
<p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span
style="font-size:9.0pt;font-family:"Tahoma",sans-serif;color:#777777;mso-fareast-language:FR-CH">Chemin
du Pré-Fleuri 5 – CH 1228 Plan-les-Ouates</span><span
style="font-size:3.5pt;font-family:"Tahoma",sans-serif;color:#777777;mso-fareast-language:FR-CH"> </span><span
style="mso-fareast-language:FR-CH"><o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
<div class="MsoNormal" style="text-align:center" align="center"><span
style="mso-fareast-language:FR-CH">
<hr width="100%" size="2" align="center">
</span></div>
<p class="MsoNormal"><b><span
style="font-size:8.0pt;font-family:Roboto;color:#FF0044;mso-fareast-language:FR-CH"
lang="EN-GB">Help save paper, do you really need to print
this email?</span></b><span
style="font-size:8.0pt;font-family:Roboto;color:#FF0044;mso-fareast-language:FR-CH"
lang="EN-GB">
</span><span style="mso-fareast-language:FR-CH" lang="EN-GB"><br>
</span><i><span
style="font-size:8.0pt;font-family:Roboto;color:#777777;mso-fareast-language:FR-CH"
lang="EN-GB">The content of this email and any attachments
are confidential and are intended solely for the person
and/or company to whom they are addressed. The information
may also be legally privileged. No employee or agent is
authorized to conclude any binding agreement on behalf of
Positive Thinking Company with another party by email
without express written confirmation. If you have received
this email in error, any use, reproduction or
dissemination of this transmission is strictly prohibited.
If you are not the intended recipient, please immediately
notify the sender by return E-mail and delete this
message, its attachments and all copies from your system.
Internet communications cannot be guaranteed to be timely,
secure, error or virus-free. The sender does not accept
liability for any errors or omissions.
</span></i><i><span
style="font-size:8.0pt;font-family:Roboto;color:#777777;mso-fareast-language:FR-CH">Thank
you for your cooperation.
<br>
</span></i><o:p></o:p></p>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
midPoint mailing list
<a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a class="moz-txt-link-freetext" href="https://lists.evolveum.com/mailman/listinfo/midpoint">https://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<pre class="moz-signature" cols="72">--
Ivan Noris
Senior Identity Engineer
evolveum.com
</pre>
</body>
</html>