IdStory Identity Manager

More feedback on the GUI for audit logs is also in #387

• case insensitive search, fulltext, ignore diacritic - for all agendas
• add IdmAccount to audit logs for users
• deleted entities (roles, contracts) in detail - show name of the entity before it was deleted (when the audit event happened)
• delete user - this record should be seen when filtering all changes on the user
• role requests - instead of "Žadatel" use something like "Pro koho je žádáno" ("Žadatel" is misleading)
• check: when renaming the user from OldName to NewName, filter audit logs for "OldName" and see the change of the name
• question: When identity is renamed, which name should be seen in older audit record details - actual name, or original name? I think we should see original name. (Same for role names, contracts,...)

• the "Audit" tab in the detail of an identity should use this new audit log for identity, it would be nice and helpful
• when using case insensitive search (everywhere in IdM), please make sure that indexes in Postgres are really used for case-insensitive search - use opsclass, e.g.
  

  CREATE INDEX idx_ops_identities_last_name ON identities USING btree (last_name varchar_pattern_ops);
  

• renaming identity from "OldName" to "NewName": most consistent behaviour would be: A) when filtering by "OldName", we get all records for "OldName" and last record would be the change from "OldName" to "NewName", B) when filtering by "NewName", we get all records for "NewName" and first record would be the change from "OldName" to "NewName".
  Currently in the case A) we see all records for "OldName", but in B) we see all records both for "NewName" and "OldName". That could be a little confusing, but it is not such big problem. Please just document the resulting behaviour in the admin guide or in Help.
• re-using logins: Identity 1 used login "johndoe". then it was deleted. Later, new identity 2 was created and got the same login "johndoe". What happens in audit log for identity, when I filter by user name "johndoe"? Can I see all records for both identities?

Alena Peterová wrote:

• when using case insensitive search (everywhere in IdM), please make sure that indexes in Postgres are really used for case-insensitive search - use opsclass, e.g.
  [...]

Sorry, this should have been 2 indexes for one column:

CREATE INDEX idx_ops_identities_last_name ON identities USING btree (last_name varchar_pattern_ops);
CREATE INDEX idx_ops_low_identities_last_name ON identities USING btree (lower(last_name) varchar_pattern_ops);

• add indexes as new flyway script,
• fix FE (show null values),
• redundant code ins't redundant (consult with VS).

Documentation will be written as soon as possible.

I guess Alena had some feedback on this issue? If so. Alca, Please comment on this ticket if those issues are not addressed yet. Otherwise ignore this post.