<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
Looks like I figured it out. I need to build filter instead of just using roleRef.</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<filter>
<div> <q:ref></div>
<div> <q:path>c:roleMembershipRef</q:path></div>
<div> <q:value></div>
<div> <q:oid>dd96656a-9a33-407e-938b-0b525c634193</q:oid></div>
<div> </q:value></div>
<div> </q:ref></div>
</filter></div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
Br,</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
Jussi<br>
</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> midPoint <midpoint-bounces@lists.evolveum.com> on behalf of Jussi Jokela via midPoint <midpoint@lists.evolveum.com><br>
<b>Sent:</b> Friday, March 11, 2022 11:10<br>
<b>To:</b> MidPoint Mailing List <midpoint@lists.evolveum.com><br>
<b>Cc:</b> Jussi Jokela <jussi.jokela@fiarone.com><br>
<b>Subject:</b> [midPoint] Object selection by role membership in authorization</font>
<div> </div>
</div>
<style type="text/css" style="display:none">
<!--
p
{margin-top:0;
margin-bottom:0}
-->
</style>
<div dir="ltr">
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
Hi everyone,</div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
Is it possible to filter object selection in authorization by role membership? For example, just like you can filter objects by orgRef, I would like to filter object by roleRef, but roleRef has no definition? Also tried roleMembershipRef but same result.<br>
</div>
<div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
<pre class="x_rouge x_highlight"><code> <span class="x_nt"><authorization></span>
<span class="x_nt"><action></span>...<span class="x_nt"></action></span>
<span class="x_nt"><object></span>
<span class="x_nt"><orgRef</span> <span class="x_na">oid=</span><span class="x_s">"1f82e908-0072-11e4-9532-001e8c717e5b"</span><span class="x_nt">/></span>
<span class="x_nt"></object></span>
<span class="x_nt"></authorization></span></code></pre>
</div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
<br>
</div>
<div id="x_Signature">
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
Best regards,</div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
Jussi Jokela<br>
</div>
<div></div>
</div>
</div>
</div>
</body>
</html>