Project

General

Profile

Actions

Task #2917

closed

LRT to create auto roles based on user's roles

Added by Roman Kučera over 2 years ago. Updated over 2 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Roman Kučera
Target version:
Start date:
08/26/2021
Due date:
% Done:

100%

Estimated time:
Owner:

Description

LRT which can do the following
search all tree nodes where some user is located
In case that only one user (contract) is on this tree node, take all his roles (or just roles with selected system) and create auto roles for this tree node with no recursion
In case multiple users (contracts) are located in this tree node. Find roles which all of users have in common and then take all of this common roles (or just roles with selected system) and create auto roles for this tree node with no recursion

LRT will have configuration for:
  • system - if no system is selected all roles will be created as auto. If system is selected only roles which has mapping for this system will be created
  • multiple users behavior - if false in case that multiple users are on same tree node nothing will be created. If true we will search for common roles
Actions #1

Updated by Roman Kučera over 2 years ago

implemented in https://github.com/bcvsolutions/czechidm-extras/tree/2917-2.x.x-LTS-create-auto-roles-from-users-roles
code coverage 90%

TODO:
Test it in GUI
Add FE localization

Actions #2

Updated by Roman Kučera over 2 years ago

  • % Done changed from 70 to 90

FE localization added.
Tested from GUI.

I will create documentation on wiki and it will be ready

Actions #5

Updated by Alena Peterová over 2 years ago

I made code review and tested it, it works fine, thanks!

Note: the roles are not created as automatic role on tree node, if the role is in any business role or in any automatic role by attribute. This doesn't depend on the type of assignment to the user (the user may have them directly, even if this is not expected). The reason is, that the roles included in business/automatic roles are meant to be assigned only through these business/automatic roles (at least in our customer's environment), so it would be unwanted to create automatic roles by tree nodes for them.
This is written in the wiki.

Actions #6

Updated by Peter Štrunc over 2 years ago

  • Status changed from In Progress to Closed
  • % Done changed from 90 to 100

Merged to 2.x.x-LTS

Actions

Also available in: Atom PDF