Defect #2336: Authorization policies - policies for standard logged user (self) and manager (by subordinate) cannot be configured together - IdStory Identity Manager

Defect #2336

Updated by Radek Tomiška almost 4 years ago

Support Suppor combine SelfIdentityEvaluator and IdentityContractByIdentityEvaluator to cover support UC: 
 - logged identity can change roles for all it's contracts, 
 - logged manager can change roles    for subondinate contracts only. 

 Add new option 'CHANGEPERMISSION' for IdentityContractByIdentityEvaluator to include this permision from identity tyransitivelly. 

 @affected version 10.3.0