Project

General

Profile

Actions

Task #1043

closed

Support skip recalculation for automatic roles by tree structure.

Added by Ondřej Kopr about 6 years ago. Updated almost 4 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Radek Tomiška
Category:
Automatic roles
Target version:
Start date:
03/27/2018
Due date:
% Done:

100%

Estimated time:
24.00 h
Owner:

Description

Support skip recalculation for automatic roles by tree structure and support recalculate of automatic roles by tree structure.


Related issues

Related to IdStory Identity Manager - Task #732: Recalculate automatic roles after move some nodesClosedRadek Tomiška10/03/2017

Actions
Related to IdStory Identity Manager - Defect #2305: Automatic role by tree structure: contract and position cannot assign the same automatic roleClosedRadek Tomiška06/08/2020

Actions
Related to IdStory Identity Manager - Defect #2418: Automatic roles by organizations are sometimes not assigned/removed after synchronization of contractsClosedRadek Tomiška07/31/2020

Actions
Related to IdStory Identity Manager - Defect #2639: Recalculation of automatic roles failed after synchronization of organizations (now it doesn't recalculate automatic roles)ClosedRadek Tomiška01/11/2021

Actions
Actions #1

Updated by Vít Švanda almost 6 years ago

  • Target version changed from Jade (8.1.0) to Lapis (8.2.0)
Actions #2

Updated by Vít Švanda almost 6 years ago

  • Priority changed from Normal to High
Actions #3

Updated by Vít Švanda almost 6 years ago

  • Target version changed from Lapis (8.2.0) to Malachite (9.0.0)
Actions #4

Updated by Vít Švanda over 5 years ago

  • Target version changed from Malachite (9.0.0) to Moonstone (9.1.0)
Actions #5

Updated by Ondřej Kopr over 5 years ago

  • Status changed from New to In Progress
Actions #6

Updated by Ondřej Kopr over 5 years ago

  • Status changed from In Progress to New
  • Priority changed from High to Normal

This task will be solved after Radek's implementation more positions for one cotract.

Actions #7

Updated by Radek Tomiška over 5 years ago

  • Target version changed from Moonstone (9.1.0) to Morganite (9.2.0)
Actions #8

Updated by Radek Tomiška over 5 years ago

  • Target version deleted (Morganite (9.2.0))
Actions #9

Updated by Radek Tomiška about 5 years ago

  • Description updated (diff)
  • Category changed from Roles to Automatic roles
  • Status changed from New to In Progress
  • Assignee changed from Ondřej Kopr to Radek Tomiška
  • Target version set to Pyrite (9.5.0)
  • Estimated time set to 24.00 h
Actions #10

Updated by Vít Švanda about 5 years ago

  • Status changed from In Progress to New
Actions #11

Updated by Vít Švanda about 5 years ago

  • Assignee changed from Radek Tomiška to Vít Švanda
Actions #12

Updated by Radek Tomiška about 5 years ago

  • Subject changed from Add skip provisioning for roleTreeNode to Support skip recalculation for automatic roles by tree structure.
  • Description updated (diff)
Actions #13

Updated by Vít Švanda about 5 years ago

  • Assignee changed from Vít Švanda to Radek Tomiška
  • Target version deleted (Pyrite (9.5.0))
Actions #14

Updated by Radek Tomiška almost 4 years ago

  • Related to Task #732: Recalculate automatic roles after move some nodes added
Actions #15

Updated by Alena Peterová almost 4 years ago

We have a project with one role, that is automatic for one root organization with cca 870 000 users. Please, try to make sure that the new recalculation of automatic roles will work for such huge amount... Or at least that there will be some possible solution for us. (The current way which processes automatic roles immediately per every contract works fine for this specific project...)

Actions #16

Updated by Radek Tomiška almost 4 years ago

  • Status changed from New to In Progress
  • Target version set to 10.4.0
Actions #17

Updated by Radek Tomiška almost 4 years ago

  • Related to Defect #2305: Automatic role by tree structure: contract and position cannot assign the same automatic role added
Actions #18

Updated by Radek Tomiška almost 4 years ago

  • % Done changed from 0 to 30

Skip automatic roles by tree structure is implemented in contract synchronization (position included). Tree and contract slice synchronization remani + test.

Actions #19

Updated by Radek Tomiška almost 4 years ago

  • Status changed from In Progress to Needs feedback
  • Assignee changed from Radek Tomiška to Vít Švanda
  • % Done changed from 30 to 90

Feature is implemented for contract, other positions, contract slices a tree node synchronization. Automatic roles are skipped during synchronization and recalculated after synchronization ends (configurable). Automatic roles are skipped just for changed records - changed records are processed only after in LRT for recaltulation skipped automatic roles (to comment above => performace will be the same as before skip is implemented). These improvement of skipped automatic role processing could be implemented into automatic roles by attribute to (all automatic roles by attribute are processed now).

Doc:
https://wiki.czechidm.com/devel/documentation/synchronization/dev/tree-sync#automatic_roles

Commit:
https://github.com/bcvsolutions/CzechIdMng/commit/25c33676c921f88641de09ce5aaf426257f9f6b5

Could you provide me a feedback, please?

Note: I improved LRT task usage in synchronization (IdmLongRunningTaskService#create method is deprecated now) and searching work positions for contracts and positions (if work position is empty).

Actions #20

Updated by Radek Tomiška almost 4 years ago

  • Status changed from Needs feedback to In Progress
  • Assignee changed from Vít Švanda to Radek Tomiška
  • % Done changed from 90 to 70

I will add improvements (notes from friday feedback):
- add LRT for recount all automatic roles
- support combination of skipping automatic roles for contract (+slices) and tree structure synchronization => one LRT should correct all skipped automatic roles (and prevent to drop and create target account).

Actions #21

Updated by Radek Tomiška almost 4 years ago

  • Status changed from In Progress to Needs feedback
  • Assignee changed from Radek Tomiška to Vít Švanda
  • % Done changed from 70 to 90

I've added LRT for recount all automatic roles by tree structure and combination of skipping automatic roles for contract (+slice) and tree synchronization is supported now.

Doc:
https://wiki.czechidm.com/devel/documentation/synchronization/dev/tree-sync#automatic_roles
https://wiki.czechidm.com/devel/documentation/application_configuration/dev/scheduled_tasks/task-scheduler#processautomaticrolebytreetaskexecutor

Commit:
https://github.com/bcvsolutions/CzechIdMng/commit/862b022b8eb4db0bf0fab730d41449f81b79a7b7

Could you provide me a feedback, please?

Actions #22

Updated by Vít Švanda almost 4 years ago

  • Status changed from Needs feedback to Resolved
  • Assignee changed from Vít Švanda to Radek Tomiška
  • % Done changed from 90 to 100

I did review and tested this very complex feature. I tested many scenarios and I didn't found any problem. Thnaks for that.

Actions #23

Updated by Radek Tomiška almost 4 years ago

  • Status changed from Resolved to Closed
Actions #24

Updated by Radek Tomiška over 3 years ago

  • Related to Defect #2418: Automatic roles by organizations are sometimes not assigned/removed after synchronization of contracts added
Actions #25

Updated by Radek Tomiška over 3 years ago

  • Related to Defect #2543: The validity of automatic roles is not changed when validity of the contract changes during synchronization added
Actions #26

Updated by Radek Tomiška over 3 years ago

  • Related to deleted (Defect #2543: The validity of automatic roles is not changed when validity of the contract changes during synchronization)
Actions #27

Updated by Radek Tomiška over 3 years ago

  • Related to Defect #2639: Recalculation of automatic roles failed after synchronization of organizations (now it doesn't recalculate automatic roles) added
Actions

Also available in: Atom PDF