IdStory Identity Manager

For AutomaticRoleRequestByWfInvolvedIdentityEvaluator should be set only READ and UPDATE permissions, because this evaluator get right see and update automatic role request in approval process only.
For create new or delete an automatic role request add another evaluator (for example BasePermissionEvaluator to choosed users).

Wiki documentation fixed (CREATE and DELETE permissions were removed from settigs of AutomaticRoleRequestByWfInvolvedIdentityEvaluator).

https://wiki.czechidm.com/devel/documentation/security/dev/authorization#default_settings_of_permissions_for_an_identity_profile