Project

General

Profile

Actions
Copy link

Task #227

closed

System role attribute mapping agenda

Added by Vít Švanda over 7 years ago. Updated over 7 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Vít Švanda
Category:
Provisioning
Target version:
Beryl
Start date:
12/01/2016
Due date:
% Done:

100%

Estimated time:
Owner:

Description

We need add new mapping layer for mapping and resolve value of attribute on role.

Actions
Copy link
 #1

Updated by Vít Švanda over 7 years ago

  • % Done changed from 0 to 20

- Added new entity, service, projection, rest, filter for RoleSystemAttribute.
- Added new fronten service, manager, context for RoleSystemAttributeDetail and refactor RoleSystemsDetail

Actions
Copy link
 #2

Updated by Vít Švanda over 7 years ago

  • % Done changed from 20 to 60

- Modify account managment - now supports overloading uid by role attribute setting.
- Provisioning modify is in progress

Actions
Copy link
 #3

Updated by Vít Švanda over 7 years ago

  • % Done changed from 60 to 70

Provisionig now support overloading attribute from roleSystem.

Actions
Copy link
 #4

Updated by Vít Švanda over 7 years ago

  • Status changed from In Progress to Needs feedback
  • Assignee changed from Vít Švanda to Radek Tomiška
  • % Done changed from 70 to 90

- Agenda for role attribute mapping is created.
- UI for default and role mapping agendas was improved.
- Account management and provisioning for this was changed.
- Test will be created within account management test.

Radek please do review

Actions
Copy link
 #5

Updated by Radek Tomiška over 7 years ago

  • Status changed from Needs feedback to In Progress
  • Assignee changed from Radek Tomiška to Vít Švanda
I did test. It is very complex functionality and it works very nice. We found some issues:
  • when assigned role (IdentityRole) is removed from identity, then provisioning is not done
  • when constant is used (no checkbox is checked), then some information should be shown (e.g. alert info)
  • overriding password attribute does not work, when password is changed
  • erd model should be updated too
  • extended attribute definition is not created in role system mapping
Actions
Copy link
 #6

Updated by Vít Švanda over 7 years ago

Fixed:
  • when assigned role (IdentityRole) is removed from identity, then provisioning is not done
  • when constant is used (no checkbox is checked), then some information should be shown (e.g. alert info)
  • extended attribute definition is not created in role system mapping
Actions
Copy link
 #7

Updated by Vít Švanda over 7 years ago

I solved problem with more same IdentityRole in same time.
- Now is this state OK and for every IdentityRole is create linked IdentityAccount.
- When is IdentityRole invalid (expired), then will be delete only linked IdentityAccount.
- When we will delete last IdentityAccount (with ownership mark) linked on same account, then we will delete this account too.
- IdentityRole validity is now correctly evaluated (interval is correct when is (from and till) date equals)

Actions
Copy link
 #8

Updated by Vít Švanda over 7 years ago

Fixed:
- overriding password attribute does not work, when password is changed
- erd model should be updated too.

- Added tests for provisioning (change single attribute) and account management (change password with overloaded attribute and disable/enable account).

Actions
Copy link
 #9

Updated by Vít Švanda over 7 years ago

  • Status changed from In Progress to Needs feedback
  • Assignee changed from Vít Švanda to Radek Tomiška

Radek please do review.

Actions
Copy link
 #10

Updated by Radek Tomiška over 7 years ago

  • Status changed from Needs feedback to Closed
  • Assignee changed from Radek Tomiška to Vít Švanda
  • % Done changed from 90 to 100

I did retest, its awesome!

Actions
Copy link

Also available in: Atom PDF