<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
Thank you for the suggestion. If you don't get another response by then, I'll bring this up on a call we have with Evolveum on Tuesday, July 8</div>
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
<br>
</div>
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
--Keith</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> midPoint <midpoint-bounces@lists.evolveum.com> on behalf of Markus Calmius via midPoint <midpoint@lists.evolveum.com><br>
<b>Sent:</b> Thursday, July 3, 2025 6:20 AM<br>
<b>To:</b> midpoint@lists.evolveum.com <midpoint@lists.evolveum.com><br>
<b>Cc:</b> Markus Calmius <markus.calmius@proton.ch><br>
<b>Subject:</b> Re: [midPoint] panel visibility</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt;">
<div class="PlainText">Hi Ivan,<br>
<br>
Certainly! Here's a more professional and balanced rephrasing of your message:<br>
<br>
---<br>
<br>
Thank you for your response.<br>
<br>
In that case, I believe the documentation may need some clarification. Currently, it states:<br>
<br>
<xsd:documentation><br>
The element will not be visible. Not even if the authorizations allow<br>
to see its content. But if any other role specifies the element as visible<br>
or automatic then it will be visible. This setting is easily overridden.<br>
</xsd:documentation><br>
<br>
To me, this implies that a setting of `vacant` should be overridden if another role defines the element as `visible` or `automatic`. However, in practice, this doesn’t seem to be the case.<br>
Especially since `automatic` is now the default value, it makes it a bit confusing.<br>
It might be helpful to update the wording or provide further explanation to avoid confusion.<br>
<br>
Kind regards,<br>
Markus<br>
<br>
On Thursday, 3 July 2025 at 12:00, midpoint-request@lists.evolveum.com <midpoint-request@lists.evolveum.com> wrote:<br>
<br>
> Send midPoint mailing list submissions to<br>
> midpoint@lists.evolveum.com<br>
> <br>
> To subscribe or unsubscribe via the World Wide Web, visit<br>
> <a href="https://lists.evolveum.com/mailman/listinfo/midpoint">https://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
> or, via email, send a message with subject or body 'help' to<br>
> midpoint-request@lists.evolveum.com<br>
> <br>
> You can reach the person managing the list at<br>
> midpoint-owner@lists.evolveum.com<br>
> <br>
> When replying, please edit your Subject line so it is more specific<br>
> than "Re: Contents of midPoint digest..."<br>
> <br>
> <br>
> Today's Topics:<br>
> <br>
> 1. panel visibility (Markus Calmius)<br>
> 2. Re: panel visibility (Ivan Noris)<br>
> <br>
> <br>
> ----------------------------------------------------------------------<br>
> <br>
> Message: 1<br>
> Date: Thu, 03 Jul 2025 07:10:11 +0000<br>
> From: Markus Calmius markus.calmius@proton.ch<br>
> <br>
> To: midPoint General Discussion midpoint@lists.evolveum.com<br>
> <br>
> Subject: [midPoint] panel visibility<br>
> Message-ID:<br>
> tHgZwByR0MS45paGBHeJn_YjowwSyWDrjCZzKdoE2rUVhZN9cv65o6gdZ0R-PPn4oXjjoVdmWXnIGjiX7PbEgwc-_enWz6UvMmodpXlE6Ss=@proton.ch<br>
> <br>
> <br>
> Content-Type: text/plain; charset="utf-8"<br>
> <br>
> Hi,<br>
> <br>
> Info: running MidPoint 4.8.5.<br>
> <br>
> Following up on my earlier message regarding delegations:<br>
> <br>
> I?d like to hide the Delegations and Delegated to Me panels for all standard users, but ensure they remain visible for users who have delegation rights.<br>
> <br>
> Based on the documentation, I assumed this could be achieved by setting:<br>
> <br>
> <visibility>vacant</visibility><br>
> <br>
> <br>
> in the role assigned to all users, and then overriding it with <visibility>automatic</visibility> or <visibility>visible</visibility> in the role granted to users with delegation rights. However, this doesn?t seem to have the intended effect.<br>
> <br>
> <br>
> Additional context:<br>
> <br>
> -<br>
> <br>
> All users are assigned a basic access role<br>
> <br>
> -<br>
> <br>
> A subset of users also receive an authorised to approve and delegate role<br>
> <br>
> Currently, the Delegations panels are hidden for all users?even those who have the additional delegation role.<br>
> <br>
> Any guidance on how to resolve this would be appreciated.<br>
> <br>
> Thanks in advance,<br>
> <br>
> Markus<br>
> -------------- next part --------------<br>
> An HTML attachment was scrubbed...<br>
> URL: <a href="https://lists.evolveum.com/pipermail/midpoint/attachments/20250703/1979a5d3/attachment-0001.htm">
https://lists.evolveum.com/pipermail/midpoint/attachments/20250703/1979a5d3/attachment-0001.htm</a><br>
> <br>
> <br>
> ------------------------------<br>
> <br>
> Message: 2<br>
> Date: Thu, 3 Jul 2025 09:50:40 +0200<br>
> From: Ivan Noris ivan.noris@evolveum.com<br>
> <br>
> To: midpoint@lists.evolveum.com<br>
> Subject: Re: [midPoint] panel visibility<br>
> Message-ID: d256c4fb-70e1-4f2e-acb9-e8165c431929@evolveum.com<br>
> <br>
> Content-Type: text/plain; charset="utf-8"; Format="flowed"<br>
> <br>
> Hi Markus,<br>
> <br>
> I think you are hitting this:<br>
> <br>
> <a href="https://docs.evolveum.com/midpoint/reference/support-4.8/admin-gui/admin-gui-config/#how-it-works">
https://docs.evolveum.com/midpoint/reference/support-4.8/admin-gui/admin-gui-config/#how-it-works</a><br>
> <br>
> " If several roles specify conflicting values then the behavior is<br>
> unpredictable. It is a responsibility of midPoint administrator to<br>
> ensure the consistency."<br>
> <br>
> Last time I had this issue, I resorted to have two distinct roles, one<br>
> for end user and other for admin users (in my case) conditionally<br>
> induced from main end user role.<br>
> <br>
> Best regards,<br>
> <br>
> Ivan<br>
> <br>
> On 3. 7. 2025 9:10, Markus Calmius via midPoint wrote:<br>
> <br>
> > Hi,<br>
> > <br>
> > Info: running MidPoint 4.8.5.<br>
> > <br>
> > Following up on my earlier message regarding delegations:<br>
> > <br>
> > I?d like to hide the /Delegations/ and /Delegated to Me/ panels for<br>
> > all standard users, but ensure they remain visible for users who have<br>
> > delegation rights.<br>
> > <br>
> > Based on the documentation, I assumed this could be achieved by setting:<br>
> > <br>
> > |<visibility>vacant</visibility> |<br>
> > <br>
> > in the role assigned to all users, and then overriding it with<br>
> > |<visibility>automatic</visibility>| or<br>
> > |<visibility>visible</visibility>| in the role granted to users with<br>
> > delegation rights. However, this doesn?t seem to have the intended effect.<br>
> > <br>
> > Additional context:<br>
> > <br>
> > *<br>
> > <br>
> > All users are assigned a basic access role<br>
> > <br>
> > *<br>
> > <br>
> > A subset of users also receive an authorised to approve and<br>
> > delegate role<br>
> > <br>
> > Currently, the /Delegations/ panels are hidden for all users?even<br>
> > those who have the additional delegation role.<br>
> > <br>
> > Any guidance on how to resolve this would be appreciated.<br>
> > <br>
> > Thanks in advance,<br>
> > <br>
> > Markus<br>
> > <br>
> > _______________________________________________<br>
> > midPoint mailing list<br>
> > midPoint@lists.evolveum.com<br>
> > <a href="https://lists.evolveum.com/mailman/listinfo/midpoint">https://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
> <br>
> <br>
> --<br>
> Ivan Noris<br>
> Expert Identity Engineer<br>
> evolveum.com<br>
> -------------- next part --------------<br>
> An HTML attachment was scrubbed...<br>
> URL: <a href="https://lists.evolveum.com/pipermail/midpoint/attachments/20250703/451c32e7/attachment-0001.htm">
https://lists.evolveum.com/pipermail/midpoint/attachments/20250703/451c32e7/attachment-0001.htm</a><br>
> <br>
> <br>
> ------------------------------<br>
> <br>
> Subject: Digest Footer<br>
> <br>
> _______________________________________________<br>
> midPoint mailing list<br>
> midPoint@lists.evolveum.com<br>
> <a href="https://lists.evolveum.com/mailman/listinfo/midpoint">https://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
> <br>
> <br>
> ------------------------------<br>
> <br>
> End of midPoint Digest, Vol 159, Issue 3<br>
> ****************************************<br>
_______________________________________________<br>
midPoint mailing list<br>
midPoint@lists.evolveum.com<br>
<a href="https://lists.evolveum.com/mailman/listinfo/midpoint">https://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
</div>
</span></font></div>
</body>
</html>