<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>Hi Yakov,</p>
<p>to hide All resources menu item, omit #resources authorization
and keep only #resourcesView.</p>
<p>Best regards,</p>
<p>Ivan<br>
</p>
<div class="moz-cite-prefix">On 24. 4. 2023 19:09, Yakov Revyakin
via midPoint wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CALXvSnsXu386F4mmCM=e_RrSdxb_N4+OPG=C85w35Gn+TJr13w@mail.gmail.com">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<div dir="ltr">I don't know how, but my configuration above
started working magically. <br>
Still interesting how to hide standard menu items:
<div>All resources for Resource</div>
<div>All tasks & predefined objectcollectionviews for well
known task types in Server Tasks.</div>
</div>
<br>
<div class="gmail_quote">
<div dir="ltr" class="gmail_attr">On Mon, 24 Apr 2023 at 18:08,
Yakov Revyakin <<a href="mailto:yrevyakin@gmail.com"
moz-do-not-send="true" class="moz-txt-link-freetext">yrevyakin@gmail.com</a>>
wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px
0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div dir="ltr">
<div>
<div id="m_-5338050684335220697gmail-:3sd">
<div id="m_-5338050684335220697gmail-:3qr"
aria-label="Message Body" role="textbox"
aria-multiline="true"
style="direction:ltr;min-height:445px"
aria-controls=":4rj">Hi all,<br>
<div>I need to customize LeftMenuPanel via a custom
user role.</div>
<div>For example, using UI authorizations I can enable
the "Resources" menu and the "All Resources" item
inside.</div>
<div>I'd like to add another objectCollectionView for
ResourceType named "Active Resources".</div>
<div>I do something like this in my custom role
assigned to appropriate user:</div>
<div>
<pre style="background-color:rgb(43,43,43);color:rgb(169,183,198);font-family:"JetBrains Mono",monospace;font-size:9.8pt"><pre style="font-family:"JetBrains Mono",monospace;font-size:9.8pt"><span style="color:rgb(232,191,106)"><authorization>
</span><span style="color:rgb(232,191,106)"> <action></span><a href="http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#resources" target="_blank" moz-do-not-send="true" class="moz-txt-link-freetext">http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#resources</a><span style="color:rgb(232,191,106)"></action>
</span><span style="color:rgb(232,191,106)"> <action></span><a href="http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#resourcesView" target="_blank" moz-do-not-send="true" class="moz-txt-link-freetext">http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#resourcesView</a><span style="color:rgb(232,191,106)"></action>
</span><span style="color:rgb(232,191,106)"></authorization>
</span></pre><pre style="font-family:"JetBrains Mono",monospace;font-size:9.8pt"><span style="color:rgb(232,191,106)"><authorization>
</span><span style="color:rgb(232,191,106)"> <action></span><a href="http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#read" target="_blank" moz-do-not-send="true" class="moz-txt-link-freetext">http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#read</a><span style="color:rgb(232,191,106)"></action>
</span><span style="color:rgb(232,191,106)"> <action></span><a href="http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#discoverConnectors" target="_blank" moz-do-not-send="true" class="moz-txt-link-freetext">http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#discoverConnectors</a><span style="color:rgb(232,191,106)"></action>
</span><span style="color:rgb(232,191,106)"> <object>
</span><span style="color:rgb(232,191,106)"> <type></span>ResourceType<span style="color:rgb(232,191,106)"></type>
</span><span style="color:rgb(232,191,106)"> </object>
</span><span style="color:rgb(232,191,106)"></authorization></span></pre><pre style="font-family:"JetBrains Mono",monospace;font-size:9.8pt"><span style="color:rgb(232,191,106)"><adminGuiConfiguration>
</span><span style="color:rgb(232,191,106)"> <objectCollectionViews>
</span><span style="color:rgb(232,191,106)"> <objectCollectionView>
</span><span style="color:rgb(232,191,106)"> <identifier></span>resource-up<span style="color:rgb(232,191,106)"></identifier>
</span><span style="color:rgb(232,191,106)"> <display>
</span><span style="color:rgb(232,191,106)"> <pluralLabel></span>Active Resources<span style="color:rgb(232,191,106)"></pluralLabel>
</span><span style="color:rgb(232,191,106)"> </display>
</span><span style="color:rgb(232,191,106)"> <visibility></span>visible<span style="color:rgb(232,191,106)"></visibility>
</span><span style="color:rgb(232,191,106)"> <applicableForOperation></span>modify<span style="color:rgb(232,191,106)"></applicableForOperation>
</span><span style="color:rgb(232,191,106)"> <type></span>ResourceType<span style="color:rgb(232,191,106)"></type>
</span><span style="color:rgb(232,191,106)"> <collection>
</span><span style="color:rgb(232,191,106)"> <collectionRef </span><span style="color:rgb(186,186,186)">oid</span><span style="color:rgb(106,135,89)">="00000000-0000-0000-0001-000000000003" </span><span style="color:rgb(186,186,186)">type</span><span style="color:rgb(106,135,89)">="c:ObjectCollectionType"</span><span style="color:rgb(232,191,106)">/>
</span><span style="color:rgb(232,191,106)"> </collection>
</span><span style="color:rgb(232,191,106)"> </objectCollectionView></span><span style="color:rgb(232,191,106)">
</span><span style="color:rgb(232,191,106)"> <enableExperimentalFeatures></span>true<span style="color:rgb(232,191,106)"></enableExperimentalFeatures>
</span><span style="color:rgb(232,191,106)"></adminGuiConfiguration></span></pre></pre>
</div>
</div>
</div>
</div>
<div>I expect to see "Resources" and an extra item "Active
Resource" inside. But still can see only default "All
Resources".<br>
What have I missed?<br>
Is this possible to reach developing a custom role? Or
SystemConfiguration is the only place where this kind of
configuration possible? <br>
If this possible the next step is to hide "All Resources"
and leave only "Active Resources". Probably someone knows
how.<br>
Thanks,</div>
<div>Yakov <br>
<br>
<br>
</div>
<div><br>
</div>
</div>
</blockquote>
</div>
<br>
<fieldset class="moz-mime-attachment-header"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
midPoint mailing list
<a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a class="moz-txt-link-freetext" href="https://lists.evolveum.com/mailman/listinfo/midpoint">https://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<pre class="moz-signature" cols="72">--
Ivan Noris
Expert Identity Engineer
evolveum.com
</pre>
</body>
</html>