Project

General

Profile

Actions
Copy link

Task #375

closed

Authorization Policies - roles and identities tabs

Added by Radek Tomiška over 7 years ago. Updated over 7 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Radek Tomiška
Category:
Authentication / Authorization
Target version:
Citrine (7.3.0)
Start date:
05/15/2017
Due date:
05/15/2017
% Done:

100%

Estimated time:
Owner:

Description

Some agendas depends on identity or role - add authorization policies support for them - e.g. load, save eav attributes by role or identity authorization policies configuration => all tabs on role and identity detail have to be secured.

Related issues

Precedes IdStory Identity Manager - Task #374: Authorization Policies for identitiesClosedOndřej Kopr05/16/201705/16/2017

Actions
Follows IdStory Identity Manager - Task #405: Default role and default permissions RejectedRadek Tomiška05/09/2017

Actions
Follows IdStory Identity Manager - Task #418: Authorization Policies - role request agendaClosedRadek Tomiška05/12/2017

Actions
Actions
Copy link
 #1

Updated by Radek Tomiška over 7 years ago

  • Status changed from New to In Progress
Actions
Copy link
 #2

Updated by Radek Tomiška over 7 years ago

  • Precedes Task #374: Authorization Policies for identities added
Actions
Copy link
 #3

Updated by Radek Tomiška over 7 years ago

  • Due date set to 05/10/2017
  • Start date changed from 04/18/2017 to 05/10/2017
  • Follows Task #405: Default role and default permissions added
Actions
Copy link
 #4

Updated by Radek Tomiška over 7 years ago

  • % Done changed from 0 to 60

All core tabs on identity profile are secured now:
- contracts
- contract guarantees
- identity roles

I continue with role's core tabs. Then docs, tests and change script for default role will be created.

Actions
Copy link
 #5

Updated by Radek Tomiška over 7 years ago

  • % Done changed from 60 to 70

Role tab are secured.
Documentation could be found here: https://proj.bcvsolutions.eu/ngidm/doku.php?id=roztridit:autorizacni_model#zakladni_autorizacni_evaluatory

For securing role request new ticket #418 was added.

Only tests remains.

Actions
Copy link
 #6

Updated by Radek Tomiška over 7 years ago

  • Due date changed from 05/10/2017 to 05/15/2017
  • Start date changed from 05/10/2017 to 05/15/2017
  • Follows Task #418: Authorization Policies - role request agenda added
Actions
Copy link
 #7

Updated by Radek Tomiška over 7 years ago

  • Status changed from In Progress to Needs feedback
  • Assignee changed from Radek Tomiška to Ondřej Kopr
  • % Done changed from 70 to 90

Test are created. Could you make a test and review please?

Actions
Copy link
 #8

Updated by Ondřej Kopr over 7 years ago

  • Status changed from Needs feedback to Resolved
  • Assignee changed from Ondřej Kopr to Radek Tomiška
  • % Done changed from 90 to 100

Check this task on clean CzechIdM installation:

  • RoleCanBeRequestedEvaluator works perfectly - after login as simple user see only roles that has canBeRequested,
  • SubordinatesEvaluator and ContractGuaranteeByIdentityContractEvaluator works,
  • RoleGuaranteeEvaluator - works,
  • ... and other as well,
  • documentation is nicely described evaluators.

Evaluators are awesome, thank you for implementation so many evaluators.

Actions
Copy link
 #9

Updated by Radek Tomiška over 7 years ago

  • Status changed from Resolved to Closed
Actions
Copy link

Also available in: Atom PDF