<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="FR-CH" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span lang="EN-US">Dear Community<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">I have a role to assign and unassign a few roles to users.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">I did it this way to list the allowed roles:<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><authorization id="41"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> <action>http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#get</action><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> <action>http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#read</action><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> <object id="31"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> <type>ObjectCollectionType</type><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> <filter><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> <q:inOid><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> <q:value>oidValue</q:value><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> </q:inOid><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> </filter><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> </object><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> </authorization><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">And so on.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Then, when the “manager” clicks on a user to add a role, the desired roles are available and it can perform the assign/unassign operation.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">The issue is that requestable roles are also listed even if the assign/unassign operation cannot be performed.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">In order to have a clean view, how the unwanted roles can be hidden ?<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">I also have another issue, the Preview Changes button does not work for my user manager, do you know a way either to give the permission or simply to hide this button from the GUI ?<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">My midpoint version is a 4.0.1<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Best regards,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td width="188" style="width:141.0pt;border:none;border-right:solid #FF1738 2.25pt;padding:0cm 7.5pt 0cm 0cm">
<p class="MsoNormal" align="right" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;text-align:right">
<a href="https://www.positivethinking.tech/"><span style="font-size:12.0pt;font-family:"Times New Roman",serif;color:blue;mso-fareast-language:FR-CH;text-decoration:none"><img border="0" width="170" height="79" style="width:1.7708in;height:.8229in" id="_x0000_i1030" src="cid:image001.png@01D98753.9C5A76F0" alt="logo"></span></a><span style="font-size:12.0pt;font-family:"Times New Roman",serif;mso-fareast-language:FR-CH"><o:p></o:p></span></p>
</td>
<td width="10" style="width:7.5pt;padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman",serif;mso-fareast-language:FR-CH"> <o:p></o:p></span></p>
</td>
<td width="497" valign="top" style="width:372.75pt;padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:#FF0044;mso-fareast-language:FR-CH">Sébastien Marbrier</span></b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:#FF0044;mso-fareast-language:FR-CH">
</span><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:#777777;mso-fareast-language:FR-CH"> | Senior IT Consultant<br>
</span><span style="font-size:9.0pt;font-family:"Tahoma",sans-serif;color:#777777;mso-fareast-language:FR-CH"><a href="mailto:smarbrier@positivethinking.tech"><span lang="EN-US" style="color:#FF0044">smarbrier@positivethinking.tech</span></a></span><span style="font-size:9.0pt;font-family:"Tahoma",sans-serif;color:#777777;mso-fareast-language:FR-CH">
</span><span lang="EN-US" style="font-size:5.0pt;font-family:"Tahoma",sans-serif;color:#777777;mso-fareast-language:FR-CH"><br>
</span><span lang="EN-US" style="font-size:9.0pt;font-family:"Tahoma",sans-serif;color:#777777;mso-fareast-language:FR-CH"><br>
Tel. </span><span style="font-size:9.0pt;font-family:"Tahoma",sans-serif;color:#777777;mso-fareast-language:FR-CH"><a href="tel:+41%2021%20601%2081%2000"><span style="color:#777777;text-decoration:none">+41 21 601 81 00</span></a>
</span><span style="font-size:5.0pt;font-family:"Tahoma",sans-serif;color:#777777;mso-fareast-language:FR-CH"><br>
</span><span style="font-size:9.0pt;font-family:"Tahoma",sans-serif;color:#777777;mso-fareast-language:FR-CH"><o:p></o:p></span></p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td style="padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal"><a href="https://teams.microsoft.com/l/chat/0/0?users=smarbrier@positivethinking.tech"><span style="font-size:12.0pt;font-family:"Times New Roman",serif;color:blue;mso-fareast-language:FR-CH;text-decoration:none"><img border="0" width="20" height="20" style="width:.2083in;height:.2083in" id="_x0000_i1029" src="cid:image002.png@01D98753.9C5A76F0" alt="Teams chat"></span></a><span style="font-size:12.0pt;font-family:"Times New Roman",serif;mso-fareast-language:FR-CH"><o:p></o:p></span></p>
</td>
<td style="padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman",serif;mso-fareast-language:FR-CH"><a href="https://teams.microsoft.com/l/chat/0/0?users=smarbrier@positivethinking.tech"><span style="font-size:9.0pt;font-family:"Tahoma",sans-serif;color:#777777;text-decoration:none"> </span></a>
<o:p></o:p></span></p>
</td>
<td style="padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman",serif;mso-fareast-language:FR-CH"><a href="https://teams.microsoft.com/l/chat/0/0?users=smarbrier@positivethinking.tech"><span lang="EN-US" style="font-size:9.0pt;font-family:"Tahoma",sans-serif;color:#777777">Chat
with me on Teams</span></a></span><span style="font-size:12.0pt;font-family:"Times New Roman",serif;mso-fareast-language:FR-CH">
<span lang="EN-US"><o:p></o:p></span></span></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><span lang="EN-US" style="font-size:1.0pt;font-family:"Tahoma",sans-serif;color:#777777;mso-fareast-language:FR-CH"><br>
</span><span lang="EN-US" style="font-size:12.0pt;font-family:"Times New Roman",serif;mso-fareast-language:FR-CH"><o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style="border:none;border-right:solid #FF1738 2.25pt;padding:0cm 7.5pt 0cm 0cm">
<p class="MsoNormal" align="right" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;text-align:right">
<span lang="EN-US" style="font-size:12.0pt;font-family:"Times New Roman",serif;mso-fareast-language:FR-CH"><br>
</span><a href="https://www.linkedin.com/company/the-positive-thinking-company/" target="_blank"><span style="font-size:12.0pt;font-family:"Times New Roman",serif;color:blue;mso-fareast-language:FR-CH;text-decoration:none"><img border="0" width="20" height="20" style="width:.2083in;height:.2083in" id="_x0000_i1028" src="cid:image003.png@01D98753.9C5A76F0"></span></a><span style="font-size:12.0pt;font-family:"Times New Roman",serif;mso-fareast-language:FR-CH">
</span><a href="https://www.instagram.com/positivethinkingcompany/" target="_blank"><span style="font-size:12.0pt;font-family:"Times New Roman",serif;color:blue;mso-fareast-language:FR-CH;text-decoration:none"><img border="0" width="20" height="20" style="width:.2083in;height:.2083in" id="_x0000_i1027" src="cid:image004.png@01D98753.9C5A76F0"></span></a><span style="font-size:12.0pt;font-family:"Times New Roman",serif;mso-fareast-language:FR-CH">
</span><a href="https://twitter.com/PTC_Tech" target="_blank"><span style="font-size:12.0pt;font-family:"Times New Roman",serif;color:blue;mso-fareast-language:FR-CH;text-decoration:none"><img border="0" width="20" height="20" style="width:.2083in;height:.2083in" id="_x0000_i1026" src="cid:image005.png@01D98753.9C5A76F0"></span></a><span style="font-size:12.0pt;font-family:"Times New Roman",serif;mso-fareast-language:FR-CH">
</span><a href="https://youtube.com/channel/UCfaImWa6r0IoZoUYLhbiF7w" target="_blank"><span style="font-size:12.0pt;font-family:"Times New Roman",serif;color:blue;mso-fareast-language:FR-CH;text-decoration:none"><img border="0" id="_x0000_i1025" src="cid:image006.png@01D98753.9C5A76F0"></span></a><span style="font-size:12.0pt;font-family:"Times New Roman",serif;mso-fareast-language:FR-CH"><o:p></o:p></span></p>
</td>
<td valign="bottom" style="padding:0cm 0cm 0cm 0cm"></td>
<td valign="bottom" style="padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Tahoma",sans-serif;color:#777777;mso-fareast-language:FR-CH">Avenue d'Ouchy 4 – CH 1006 Lausanne<br>
<a href="https://www.positivethinking.tech/"><span style="color:#FF0044">www.positivethinking.tech</span></a>
<br>
</span><span style="font-size:3.5pt;font-family:"Tahoma",sans-serif;color:#777777;mso-fareast-language:FR-CH"> </span><span style="font-size:12.0pt;font-family:"Times New Roman",serif;mso-fareast-language:FR-CH"><o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p></p>
<hr>
<span style="font-size:8px"><em><span style="font-family:Roboto,Arial"><span style="color:#777777">Collaboration Betters the World and its subsidiaries and brands (Positive Thinking Company, Versett, AlisPharm, Otofacto, OneAston and SteepConsult) put security
at a high priority in its conduct of business. Therefore, we have put our best efforts into ensuring that this email and its attached documents are error and virus-free. Nonetheless, full security of emails/documents cannot be ensured. Therefore, the recipient
is responsible for checking the email/documents for threats with its own security measures, prior to opening it. Collaboration Betters the World does not accept liability for any damage inflicted by using the content of this email/documents. If you are not
the intended recipient, please notify the sender and delete this email/document.</span></span></em></span>
<p></p>
</body>
</html>