Project

General

Profile

Actions

Task #732

closed

Recalculate automatic roles after move some nodes

Added by Ondřej Kopr about 7 years ago. Updated over 4 years ago.

Status:
Closed
Priority:
Urgent
Assignee:
Radek Tomiška
Category:
Tree structures
Target version:
Start date:
10/03/2017
Due date:
% Done:

100%

Estimated time:
40.00 h
Owner:

Description

If an organization moves under org B, then the user should also get auto roles from B that have DOWN propagation.


Related issues

Related to IdStory Identity Manager - Task #449: Invoke provisioning after org. tree is movedIn ProgressMarcel Poul05/26/2017

Actions
Related to IdStory Identity Manager - Task #1043: Support skip recalculation for automatic roles by tree structure.ClosedRadek Tomiška03/27/2018

Actions
Related to IdStory Identity Manager - Task #1968: Prevent to try assign duplicated automatic rolesNewRadek Tomiška11/29/2019

Actions
Related to IdStory Identity Manager - Feature #1145: Support multiple organizations for one contractClosedRadek Tomiška06/18/2018

Actions
Related to IdStory Identity Manager - Task #2275: Automatic role by tree structure: find valid (now or in future) contracts only (query optimization)ClosedRadek Tomiška05/26/2020

Actions
Actions #1

Updated by Ondřej Kopr about 7 years ago

  • Assignee deleted (Radek Tomiška)
Actions #3

Updated by Radek Tomiška about 7 years ago

  • Related to Task #449: Invoke provisioning after org. tree is moved added
Actions #4

Updated by Marcel Poul about 7 years ago

Ondřej Kopr wrote:

If an organization moves under org B, then the user should also get auto roles from B that have DOWN propagation.

and should lose roles assigned due to old organisation structure (the organization the user is moved from and UP). Simply roles for users should be recomputed.

Actions #5

Updated by Radek Tomiška about 7 years ago

  • Assignee set to Radek Tomiška
Actions #6

Updated by Marcel Poul over 4 years ago

  • Priority changed from Normal to Urgent
Actions #7

Updated by Radek Tomiška over 4 years ago

  • Target version set to 10.3.0
  • Estimated time set to 40.00 h
Actions #8

Updated by Radek Tomiška over 4 years ago

  • Target version changed from 10.3.0 to 10.4.0
Actions #9

Updated by Radek Tomiška over 4 years ago

  • Status changed from New to In Progress
Actions #10

Updated by Radek Tomiška over 4 years ago

  • Related to Task #1043: Support skip recalculation for automatic roles by tree structure. added
Actions #11

Updated by Radek Tomiška over 4 years ago

  • Related to Task #1968: Prevent to try assign duplicated automatic roles added
Actions #12

Updated by Radek Tomiška over 4 years ago

  • Related to Feature #1145: Support multiple organizations for one contract added
Actions #13

Updated by Radek Tomiška over 4 years ago

  • Related to Task #2275: Automatic role by tree structure: find valid (now or in future) contracts only (query optimization) added
Actions #14

Updated by Radek Tomiška over 4 years ago

  • Status changed from In Progress to Needs feedback
  • Assignee changed from Radek Tomiška to Vít Švanda
  • % Done changed from 0 to 90

When tree node move under different parent, then all affected automatic roles by tree structure (for contracts and contract positions too) are recounted.

Commit:
https://github.com/bcvsolutions/CzechIdMng/commit/7fae61010a4495e8bd30c7528ba063d6da163bc4

Could you provide me a feedback, please?

Actions #15

Updated by Vít Švanda over 4 years ago

  • Status changed from Needs feedback to In Progress
  • Assignee changed from Vít Švanda to Radek Tomiška

I did reivew. I tested it as best I could. Recalculation on change tree structure works well now. Thanks for that.

We found only problem with re-run the LRT task (java.lang.ClassCastException: Identified object [[eb43780e-69f3-47b1-b4b0-8b5ff4ebd28e]] is not an UUID.)

Notes:
You uses finding contracts/identity-roles/identities by page. Personally I prefer loading all data with one query. I understand that my way can cause potential memory problem with big data, but I am afraid from situation when someone who can change selected data during processing. Only the future to show which way is better :-).

Commit: https://github.com/bcvsolutions/CzechIdMng/commit/10feace4eca7b10b22039bb21d004ecb5f0fc312

Actions #16

Updated by Radek Tomiška over 4 years ago

  • Status changed from In Progress to Needs feedback
  • Assignee changed from Radek Tomiška to Vít Švanda

I fixed re-run the LRT task with list of automatic roles, commit:

https://github.com/bcvsolutions/CzechIdMng/commit/ad409a442a674c67a9db8dd46b57dfa8bddc10c8

Could you provide me a feedback again, please?

Actions #17

Updated by Vít Švanda over 4 years ago

  • Status changed from Needs feedback to Resolved
  • Assignee changed from Vít Švanda to Radek Tomiška
  • % Done changed from 90 to 100

I did review and test. Re-run works correctly now. Thnaks for that.

Actions #18

Updated by Radek Tomiška over 4 years ago

  • Status changed from Resolved to Closed
Actions

Also available in: Atom PDF