Description
User has permission to update some of his attributes.
Everything works, but Preview changes throws 403.
Log:
2020-01-20 10:50:35,574 [MODEL] [http-nio-8080-exec-3] TRACE (com.evolveum.midpoint.security.api.SecurityUtil): Denied access to FilterInvocation: URL: /admin/previewChanges?3 by X000005 : Not authorized; one of the following authorization actions is required: [http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#usersAll, http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#user, http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#rolesAll, http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#role, http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#orgAll, http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#orgUnit, http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#servicesAll, http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#service, http://midpoint.evolveum.com/xml/ns/public/security/authorization-3#guiAll, http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#all]
The user does NOT have any of the mentioned authz and will not have them. Why Preview page wants them?
Authorizations are attached.