Feature #1798
closed
Separate permission for "Disable manually" and "Enable manually"
100%
Description
Currently, the bulk action "Disable manually identities" requires IDENTITY UPDATE permission.
Please add a new permission MANUALLY_DISABLE which enables the user to disable manually the entity, but not update any other identity attribute.
Also MANUALLY_ENABLE for manually enabling the identities.
Use-case:
The manager can manually disable his subordinates when he dismisses them.
But he can't edit their attributes (e.g. first name, last name), which come from HR system.
Updated by Radek Tomiška over 4 years ago
- Category changed from Bulk operations to 44
- Assignee changed from Ondřej Kopr to Radek Tomiška
Updated by Alena Peterová over 4 years ago
- Assignee changed from Radek Tomiška to Ondřej Kopr
Updated by Radek Tomiška over 4 years ago
- Status changed from New to In Progress
- Assignee changed from Ondřej Kopr to Radek Tomiška
- Target version set to Rhyolite (9.7.3)
- Estimated time set to 2.00 h
Updated by Radek Tomiška over 4 years ago
- Status changed from In Progress to Needs feedback
- Assignee changed from Radek Tomiška to Ondřej Kopr
- % Done changed from 0 to 90
It's implemented as description says - new permissions added (works for dashboard buttons, rest endpoints and bulk actions).
Commit:
https://github.com/bcvsolutions/CzechIdMng/commit/b9e8b5473017fda78a17393459f120e032df468b
Doc:
https://wiki.czechidm.com/devel/documentation/security/dev/authorization#identity
Change log updated: New permission is needed to be configured.
Could you do a feedback, please.
Updated by Ondřej Kopr over 4 years ago
- Status changed from Needs feedback to Resolved
- Assignee changed from Ondřej Kopr to Radek Tomiška
- % Done changed from 90 to 100
Thank you. New permissions works as I expect. Permissions works individually or in combination, thanks.
Updated by Radek Tomiška over 4 years ago
- Status changed from Resolved to Closed