Project

General

Profile

Actions

Defect #2990

closed

Some bulk actions started by managers process more users/contracts than they should

Added by Alena Peterová over 2 years ago. Updated over 2 years ago.

Status:
Closed
Priority:
High
Assignee:
Tomáš Doischer
Category:
Bulk operations
Target version:
Start date:
11/02/2021
Due date:
% Done:

100%

Estimated time:
Affected versions:
Owner:

Description

Tested on 11.1.1 and 11.1.2

When managers run some of the bulk actions for all users (checkbox at the top of the table), the number of really processed items contains all users in IdM, not only their subordinates. Sometimes they can display all the users in the result of the bulk action. In some cases, the action is even processed.

As a managers, I can see this:

The result of the bulk actions:

Problematic bulk actions AFAIK:
  • IdentityChangeContractGuaranteeBulkAction
  • IdentityAddContractGuaranteeBulkAction - displays all contracts in the system
  • IdentityChangeContractTreeNodeAndValidityBulkAction - displays all contracts in the system
  • IdentityEvaluateStateBulkAction - processes most of the users and display all
  • IdentityChangeUserTypeBulkAction - processes all users and display all
Managers have only the basic userRole containing:
  • standard userRole
    • standard userManagerRole
    • role "additional permissions" which adds permissions to update identity and display their own long running tasks (bulk actions)

Export of the roles is attached.

We use only direct managers:
idm.sec.core.filter.IdmIdentity.managersFor.impl=guaranteeManagersFilter
idm.sec.core.filter.IdmIdentity.subordinatesFor.impl=guaranteeSubordinatesFilter


Files

roles-of-manager.zip (34.2 KB) roles-of-manager.zip Alena Peterová, 11/02/2021 10:59 AM
users.png (64.2 KB) users.png Alena Peterová, 11/02/2021 10:59 AM
scheduled_tasks_result.png (180 KB) scheduled_tasks_result.png Alena Peterová, 11/02/2021 10:59 AM
permissions_to_update_user_and_display_tasks.png (92.3 KB) permissions_to_update_user_and_display_tasks.png Alena Peterová, 11/02/2021 11:00 AM

Related issues

Related to IdStory Identity Manager - Feature #2700: Bulk move users to a different work position and change their contract expirationClosedOndrej Husník03/02/2021

Actions
Related to IdStory Identity Manager - Feature #2664: Bulk add and remove contract managerClosedOndrej Husník01/26/202102/23/2021

Actions
Actions

Also available in: Atom PDF