Project

General

Profile

Actions

Defect #1538

closed

Business role: Show cyclic role in tree, removing business sub role from business role definition, remove account from sub role

Added by Ondřej Kopr almost 6 years ago. Updated about 4 years ago.

Status:
Closed
Priority:
High
Assignee:
Radek Tomiška
Category:
Roles
Target version:
Start date:
03/05/2019
Due date:
% Done:

100%

Estimated time:
Affected versions:
Owner:

Description

On project exists use case:

while was removing subroles from role (sub role has mapped system). IdentityRole was removed successful but the AccIdentityAccount still exists. This state throw error with entity not found (data integrity).

For more infromation and logs please ask the project team.

Version 9.?.?


Related issues

Related to IdStory Identity Manager - Task #2558: FE: improve info component for business roleClosedRadek Tomiška11/04/2020

Actions
Related to IdStory Identity Manager - Task #1636: Redesign business roles assignmentClosedRadek Tomiška05/06/2019

Actions
Related to IdStory Identity Manager - Task #1142: Add overview of events to more entitesClosedRadek Tomiška06/15/2018

Actions
Related to IdStory Identity Manager - Defect #2078: Account is not created, after new business role composition is created under already assigned superior roleClosedRadek Tomiška02/24/2020

Actions
Related to IdStory Identity Manager - Task #2597: Event: set EXECUTED event result state when task will continue asynchronously (when AcceptedException is returned, e.g. Role recalculation - change type of result code when 2 LRTs run simultaneously)ClosedRadek Tomiška12/04/2020

Actions
Has duplicate IdStory Identity Manager - Defect #2570: Role assigned as superior and sub role at onceRejectedOndřej Kopr11/09/2020

Actions
Actions #2

Updated by Radek Tomiška about 4 years ago

  • Assignee changed from Ondřej Kopr to Radek Tomiška
  • Affected versions Rhyolite (9.7.17) added
Actions #3

Updated by Radek Tomiška about 4 years ago

  • Status changed from New to In Progress
  • Target version set to 10.7.0
Actions #4

Updated by Radek Tomiška about 4 years ago

  • Related to Task #2558: FE: improve info component for business role added
Actions #5

Updated by Radek Tomiška about 4 years ago

  • Related to Task #1636: Redesign business roles assignment added
Actions #6

Updated by Radek Tomiška about 4 years ago

  • Subject changed from Check the removing subroles with mapped system to Business role: Show cyclic role in tree, removing business sub role from business role definition
  • Target version changed from 10.7.0 to 10.6.2
  • Affected versions Malachite (9.0.0) added
  • Affected versions deleted (Rhyolite (9.7.17))

I test behavior, when cyclic sub role is defined / assigned / removed / definition is deleted.

I cannot reproduce issue with referential integrity with account <=> assigned role - it works correctly in current version.

But I found other issues, which will be fixed:
- @since 9.0.0 - RoleInfo component - blank page is shown, when cyclic role was expanded in tree
- @since 9.0.0 - when cyclic business role is assigned, and cycle definition is removed, then all sub roles are removed too (form cyclic role, if role is a business role)
- @since 10.6.0 - when duplicatelly assigned role is business role (one business role contains sub role twice), then sub roles were assigned only once - it seems ok, but when one duplicate role definition is removed, then sub roles are removed too => sub roles of duplicate role are assigned too now (it seem not ok, but it will be more consistent).
- @since 10.6.0 - when some sub role mapping some system, ten account is not deleted after the last subrole is removed.
- @since 10.6.0 - when role composition is removed, then sub role cache is not evicted

Issues from 10.6.0 are important, I'll create version 10.6.2 and fix will be there.

Actions #7

Updated by Radek Tomiška about 4 years ago

  • Priority changed from Normal to High
  • % Done changed from 0 to 50
  • Affected versions 10.6.0 added
Actions #8

Updated by Radek Tomiška about 4 years ago

  • Subject changed from Business role: Show cyclic role in tree, removing business sub role from business role definition to Business role: Show cyclic role in tree, removing business sub role from business role definition, remove account from sub role
Actions #9

Updated by Radek Tomiška about 4 years ago

  • Related to Task #1142: Add overview of events to more entites added
Actions #10

Updated by Radek Tomiška about 4 years ago

  • Related to Defect #2078: Account is not created, after new business role composition is created under already assigned superior role added
Actions #11

Updated by Radek Tomiška about 4 years ago

  • Status changed from In Progress to Needs feedback
  • Assignee changed from Radek Tomiška to Vít Švanda
  • % Done changed from 50 to 90

All issues above are fixed, commit:
https://github.com/bcvsolutions/CzechIdMng/commit/dc4fe82a3b5843a5a88b5d1610a8c39e4a0c0bac

Could you provide me a feedback, please?

Actions #12

Updated by Vít Švanda about 4 years ago

  • Status changed from Needs feedback to Resolved
  • Assignee changed from Vít Švanda to Radek Tomiška
  • % Done changed from 90 to 100

I did review and tested (I hope) all affected scenarios. Works well. THX

Actions #13

Updated by Radek Tomiška about 4 years ago

  • Status changed from Resolved to Closed
Actions #14

Updated by Radek Tomiška about 4 years ago

  • Has duplicate Defect #2570: Role assigned as superior and sub role at once added
Actions #15

Updated by Radek Tomiška about 4 years ago

  • Related to Task #2597: Event: set EXECUTED event result state when task will continue asynchronously (when AcceptedException is returned, e.g. Role recalculation - change type of result code when 2 LRTs run simultaneously) added
Actions

Also available in: Atom PDF