Actions
Defect #2990
closedSome bulk actions started by managers process more users/contracts than they should
Start date:
11/02/2021
Due date:
% Done:
100%
Estimated time:
Description
Tested on 11.1.1 and 11.1.2
When managers run some of the bulk actions for all users (checkbox at the top of the table), the number of really processed items contains all users in IdM, not only their subordinates. Sometimes they can display all the users in the result of the bulk action. In some cases, the action is even processed.
As a managers, I can see this:
The result of the bulk actions:
- IdentityChangeContractGuaranteeBulkAction
- IdentityAddContractGuaranteeBulkAction - displays all contracts in the system
- IdentityChangeContractTreeNodeAndValidityBulkAction - displays all contracts in the system
- IdentityEvaluateStateBulkAction - processes most of the users and display all
- IdentityChangeUserTypeBulkAction - processes all users and display all
- standard userRole
- standard userManagerRole
- role "additional permissions" which adds permissions to update identity and display their own long running tasks (bulk actions)
Export of the roles is attached.
We use only direct managers:
idm.sec.core.filter.IdmIdentity.managersFor.impl=guaranteeManagersFilter
idm.sec.core.filter.IdmIdentity.subordinatesFor.impl=guaranteeSubordinatesFilter
Files
Related issues
Actions