Project

General

Profile

Actions
Copy link

Task #781

closed

Do acc and provisioning when system on role changed

Added by Vít Švanda about 7 years ago. Updated over 6 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Vít Švanda
Category:
Account managment
Target version:
Lapis (8.2.0)
Start date:
10/23/2017
Due date:
% Done:

100%

Estimated time:
Owner:

Description

When system assigen or role changed, then we have to do account management and provisioning for all identities with this role.

Related issues

Related to IdStory Identity Manager - Task #1164: Bulk backend action - prevalidateClosedVít Švanda07/02/2018

Actions
Actions
Copy link
 #1

Updated by Alena Peterová about 7 years ago

Hi, will this ticket also solve the following situation?
  1. The role R doesn't assign any system yet
  2. An identity has the role R
  3. The system S is assigned to the role R
  4. The admin resaves the identity and expects that a new account will be created on the system S.

Currently, the new account is not created.

A similar situation:
  1. An identity has the role and the account
  2. The account is deleted (manually or automatically, it doesn't matter)
  3. The admin resaves the identity and expects that a new account will be created.

------------------------------
Ad provisioning for all identities with this role:
As an admin, I would like to have a choice. If I confirm it, the provisioning is done immediately. If I don't confirm it, no provisioning is made yet.
The main use case is when configuring several attributes for the same role - I don't want to run provisioning on all identities for every changed attribute separately, but only once. Also, I would like first to try the change for one identity, check that everything works as I wanted, and after that run provisioning on all identities.

Actions
Copy link
 #2

Updated by Vít Švanda about 7 years ago

  • Target version deleted (Forsterite (7.6.0))
Actions
Copy link
 #3

Updated by Vít Švanda over 6 years ago

  • Target version set to Lapis (8.2.0)
Actions
Copy link
 #4

Updated by Vít Švanda over 6 years ago

  • Status changed from New to In Progress

This functionality will be realized as bulk operation for roles.

Actions
Copy link
 #5

Updated by Vít Švanda over 6 years ago

  • Assignee changed from Vít Švanda to Radek Tomiška
Actions
Copy link
 #6

Updated by Vít Švanda over 6 years ago

  • Priority changed from Normal to Immediate
Actions
Copy link
 #7

Updated by Vít Švanda over 6 years ago

  • Assignee changed from Radek Tomiška to Vít Švanda
  • Priority changed from Immediate to Normal
Actions
Copy link
 #8

Updated by Vít Švanda over 6 years ago

  • % Done changed from 0 to 80

Created new actions for role:

RoleAccountManagementBulkAction

  • This bulk action is available on the role table.
  • Role table was modifed (manager) for using a backend actions.
  • This operations invoke notify for all identity-roles for all selected roles.
  • Ids and username of identities are save to every LRT item.
  • Permissions are controlled by role UPDATE (not by identity update).
  • Operation use new feature "Prevalidate" for check how many users (identity-roles) are connected with that role.

RoleDeleteBulkAction

  • This bulk action is available on the role table.
  • Operation use new feature "Prevalidate" for check how many users (identity-roles) are connected with that role.

Prevalidate feature #1164:

  • Every action has method "prevalidate" returns 'ResultModels'. In infos list can be send additional informations from backend and show to user.
  • Prevalidate method is called only on show the bulk operation modal dialog.
  • ResultModels uses standard ResultCode enumerations.

Icon feature #1164:

  • Every bulk action can has icon representation now. That icon is shows in the actions selectbox. Icon can be defined in the localization with using the 'icon' key.

Help message feature #1164:

  • Every bulk action can has help box shows on the modal dialog. Icon can be defined in the localization with using the 'help' key.
Actions
Copy link
 #9

Updated by Vít Švanda over 6 years ago

  • Every changes are in the branch "vsvanda/781-bulk-action-ACM-for-role".
Actions
Copy link
 #10

Updated by Vít Švanda over 6 years ago

  • Status changed from In Progress to Needs feedback
  • Assignee changed from Vít Švanda to Ondřej Kopr
Actions
Copy link
 #11

Updated by Vít Švanda over 6 years ago

  • Assignee changed from Ondřej Kopr to Radek Tomiška
Actions
Copy link
 #12

Updated by Vít Švanda over 6 years ago

  • Assignee changed from Radek Tomiška to Ondřej Kopr
Actions
Copy link
 #13

Updated by Radek Tomiška over 6 years ago

  • Assignee changed from Ondřej Kopr to Radek Tomiška
Actions
Copy link
 #14

Updated by Radek Tomiška over 6 years ago

  • Status changed from Needs feedback to Closed
  • Assignee changed from Radek Tomiška to Vít Švanda
  • % Done changed from 80 to 100

I did test and review, it works and code looks nice, thx!

Review notes will be added in #1164.

Actions
Copy link
 #15

Updated by Radek Tomiška over 6 years ago

  • Related to Task #1164: Bulk backend action - prevalidate added
Actions
Copy link

Also available in: Atom PDF