Project

General

Profile

Actions

Task #2219

closed

Authorization policies - add autocomplete permission to LRT.

Added by Radek Tomiška over 4 years ago. Updated over 4 years ago.

Status:
Closed
Priority:
Low
Assignee:
Radek Tomiška
Category:
Authentication / Authorization
Target version:
Start date:
04/20/2020
Due date:
% Done:

100%

Estimated time:
Owner:

Description

When bulk action is executed, ther read LRT permission is needed. Add new autocomplete permission to long running task => and use it to see progress of LRT by normal user.


Related issues

Related to IdStory Identity Manager - Defect #2218: Can't set permission to IdmImportLog, IdmScheduledTask, IdmProcessedTaskItemClosedRadek Tomiška04/20/2020

Actions
Actions #1

Updated by Radek Tomiška over 4 years ago

  • Related to Defect #2218: Can't set permission to IdmImportLog, IdmScheduledTask, IdmProcessedTaskItem added
Actions #2

Updated by Radek Tomiška over 4 years ago

  • Status changed from New to In Progress
Actions #3

Updated by Radek Tomiška over 4 years ago

  • Status changed from In Progress to Needs feedback
  • Assignee changed from Radek Tomiška to Vít Švanda
  • % Done changed from 0 to 90

I removed duplicate ''LONGRUNNINGTASK'' group permission (added recently) and two new permissions created / used in the ''SCHEDULER'' group:
- ''DELETE'' - used for delete LRT from long running task agenda.
- ''AUTOCOMPLETE'' - used to see progress of bulk action.

Commit:
https://github.com/bcvsolutions/CzechIdMng/commit/b4f10a7c613ba402c077cf278e20da5315467408

Doc:
https://wiki.czechidm.com/devel/documentation/security/dev/authorization#default_settings_of_permissions_for_an_identity_profile

Could you provide me a feedback, please?

Actions #4

Updated by Vít Švanda over 4 years ago

  • Status changed from Needs feedback to In Progress
  • Assignee changed from Vít Švanda to Radek Tomiška

I did review and test. Works nice. I need only autocomplete permission now.

In Export/Import documentation I suggestion add READ permission for scheduler. I modified this documentation for use autocomplete, but maybe READ permission could works still in this case. Users would then not have to change settings. What do you think?

Actions #5

Updated by Radek Tomiška over 4 years ago

Sorry i overlook it in Export/Import documentation. I didn't added the READ permission to be the same as other endpoints.

Actions #6

Updated by Radek Tomiška over 4 years ago

  • Status changed from In Progress to Resolved
  • % Done changed from 90 to 100
Actions #7

Updated by Radek Tomiška over 4 years ago

  • Status changed from Resolved to Closed
Actions

Also available in: Atom PDF