Project

General

Profile

Task #2219

Authorization policies - add autocomplete permission to LRT.

Added by Radek Tomiška 7 months ago. Updated 7 months ago.

Status:
Closed
Priority:
Low
Category:
Authentication / Authorization
Target version:
Start date:
04/20/2020
Due date:
% Done:

100%

Estimated time:
Milestones:

Description

When bulk action is executed, ther read LRT permission is needed. Add new autocomplete permission to long running task => and use it to see progress of LRT by normal user.


Related issues

Related to CzechIdM - Defect #2218: Can't set permission to IdmImportLog, IdmScheduledTask, IdmProcessedTaskItemClosed04/20/2020

History

#1 Updated by Radek Tomiška 7 months ago

  • Related to Defect #2218: Can't set permission to IdmImportLog, IdmScheduledTask, IdmProcessedTaskItem added

#2 Updated by Radek Tomiška 7 months ago

  • Status changed from New to In Progress

#3 Updated by Radek Tomiška 7 months ago

  • Status changed from In Progress to Needs feedback
  • Assignee changed from Radek Tomiška to Vít Švanda
  • % Done changed from 0 to 90

I removed duplicate ''LONGRUNNINGTASK'' group permission (added recently) and two new permissions created / used in the ''SCHEDULER'' group:
- ''DELETE'' - used for delete LRT from long running task agenda.
- ''AUTOCOMPLETE'' - used to see progress of bulk action.

Commit:
https://github.com/bcvsolutions/CzechIdMng/commit/b4f10a7c613ba402c077cf278e20da5315467408

Doc:
https://wiki.czechidm.com/devel/documentation/security/dev/authorization#default_settings_of_permissions_for_an_identity_profile

Could you provide me a feedback, please?

#4 Updated by Vít Švanda 7 months ago

  • Status changed from Needs feedback to In Progress
  • Assignee changed from Vít Švanda to Radek Tomiška

I did review and test. Works nice. I need only autocomplete permission now.

In Export/Import documentation I suggestion add READ permission for scheduler. I modified this documentation for use autocomplete, but maybe READ permission could works still in this case. Users would then not have to change settings. What do you think?

#5 Updated by Radek Tomiška 7 months ago

Sorry i overlook it in Export/Import documentation. I didn't added the READ permission to be the same as other endpoints.

#6 Updated by Radek Tomiška 7 months ago

  • Status changed from In Progress to Resolved
  • % Done changed from 90 to 100

#7 Updated by Radek Tomiška 7 months ago

  • Status changed from Resolved to Closed

Also available in: Atom PDF

Go to top