Project

General

Profile

Actions
Copy link

Defect #3465

open

Attribute with validation in projection is always editable

Added by Vladimír Kotýnek 6 months ago. Updated 6 months ago.

Status:
New
Priority:
High
Assignee:
-
Category:
Identities
Target version:
-
Start date:
10/30/2023
Due date:
% Done:

0%

Estimated time:
Affected versions:
12.2.0, 13.0.6
Owner:

Description

How to reproduce:
  1. create new projection
  2. add identity EAV attribute to projection
  3. add validation to this EAV attribute
  4. save projection
  5. create new user with this projection
  6. create new role with permissions:
    • IdmFormAttribute autocomplete BasePermissionEvaluator
    • IdmFormDefinition autocomplete BasePermissionEvaluator
    • IdmIdentityContractFormValue read,count,autocomplete IdentityContractFormValueEvaluator for default definition
    • IdmIdentityFormValue read,count,autocomplete IdentityFormValueEvaluator for default definition
    • IdmIdentity read,count,autocomplete IdentityByFormProjectionEvaluator for this new projection
    • IdmIdentityContract read,count,autocomplete IdentityContractByIdentityEvaluator COUNT,READ,AUTOCOMPLETE
    • IdmTreeNode autocomplete BasePermissionEvaluator
    • IdmTreeType autocomplete BasePermissionEvaluator
  7. add this role to some user with no other permissions in IdM besides userRole
  8. log in IdM and open projection form of a user with this new projection
    • the EAV attribute is editable
    • no save button is available
  9. go to full detail of this user and EAV tab "More information"
    • the EAV attribute is editable
    • save button is present
  10. click on save button
  11. error message appears due to insufficient rights.

In this situation the user has to rights to edit anything on user with this projection so I would expect the field with the EAV to by disabled/not editable. When the EAV has no validation set and are present in the projection form, they are disabled.

No data to display

Actions
Copy link

Also available in: Atom PDF