Defect #2078
closed
Account is not created, after new business role composition is created under already assigned superior role
100%
Description
UC:
1) roleA is assigned to identity (without sub role is defined)
2) roleB has sub role roleC
3) roleC assign target system C
4) roleA - add new sub role roleB.
=> identity has subroles properly assigned, but no account on system C.
@affected version >=9.0.0
Related issues
Updated by Radek Tomiška almost 5 years ago
- Status changed from New to Needs feedback
- Assignee changed from Radek Tomiška to Vít Švanda
- % Done changed from 0 to 90
Account management (and provisioning) was executed for the first sub role (roleB) only. I've added check to prevent skip account management for other subroles.
Commit:
https://github.com/bcvsolutions/CzechIdMng/commit/e15c70d2b9e2e1a0862297b1264136211d32b7fd
Could you provide me a feedback please?
Workaround 1: Turn off asynchronous processing - issue occurs when asynchronous procesing is enabled
Workaround 2: Execute account management for newly added sub role with target system.
Updated by Vít Švanda almost 5 years ago
- Status changed from Needs feedback to Resolved
- Assignee changed from Vít Švanda to Radek Tomiška
- % Done changed from 90 to 100
I made a review and test. This is complicated scenario, but now it works correctly. Thanks for this fix.
Updated by Radek Tomiška almost 5 years ago
- Status changed from Resolved to Closed
Updated by Radek Tomiška about 4 years ago
- Related to Defect #1538: Business role: Show cyclic role in tree, removing business sub role from business role definition, remove account from sub role added