Uploaded image for project: 'MidPoint'
  1. MidPoint
  2. MID-2142

Capabilities per objectType (e.g. Delete capability only for some intents)

    XMLWordPrintable

    Details

    • Subscription:
      Internal

      Description

      Use case: normal accounts in AD can be deleted (intent=default); system accounts cannot (intent=system).
      Workaround is using ACL in AD to disable deletes, but is this possible for the case when the accounts are not in one specific container, or even mixed with the other accounts?

      Protected accounts cannot be used, because I only want to disable Delete operation.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              vix Ivan Noris
              Reporter:
              vix Ivan Noris
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: