Uploaded image for project: 'MidPoint'
  1. MidPoint
  2. MID-6113

policyActions-approval not induced to draft user from meta role

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 4.0.2
    • Fix Version/s: 4.1
    • Component/s: None
    • Labels:
    • Subscription:
      Active subscription
    • Backport Version:

      Description

      1. Create UserType with lifecycleState=draft
      2. Create new ServiceType and assign it to meta role that induces approval stage (see attached)
      3. Go to user and assign this service, observe that no approval is started
      4. Go to user and change licycleState to active, request service again, notice the approval is started

      This is bug. Draft state of the object should not avoid approvals. I know that before object is activated it does not project values to target systems, but still, it gets assignment without approval.

      MetaRole:

      <role xmlns="http://midpoint.evolveum.com/xml/ns/public/common/common-3" xmlns:q="http://prism.evolveum.com/xml/ns/public/query-3">
      	<name>Metarole: approval by the Security</name>
      	
      	<inducement>
      		<policyRule>
      			<policyConstraints>
      				<assignment>
      					<operation>add</operation>
      				</assignment>
      			</policyConstraints>
      			<policyActions>
      				<approval>
      					<compositionStrategy>
      						<order>30</order>
      					</compositionStrategy>
      					<approvalSchema>
      						<stage>
      							<name>Security Approval</name>
      							<approverRef oid ="Org:Security" type="OrgType">
      								<resolutionTime>run</resolutionTime>
      							</approverRef>
      							<evaluationStrategy>firstDecides</evaluationStrategy>
      							<groupExpansion>onWorkItemCreation</groupExpansion>
      							<outcomeIfNoApprovers>reject</outcomeIfNoApprovers>
      						</stage>
      					</approvalSchema>
      				</approval>
      			</policyActions>
      		</policyRule>
      	</inducement>
      	<activation>
      		<administrativeStatus>enabled</administrativeStatus>
      		<effectiveStatus>enabled</effectiveStatus>
      	</activation>
      	<requestable>false</requestable>
      	<delegable>false</delegable>
      	<idempotence>conservative</idempotence>
      	<lifecycleState>active</lifecycleState>
      	
      </role>
      

        Attachments

          Activity

            People

            Assignee:
            martin.lizner Martin Lizner
            Reporter:
            martin.lizner Martin Lizner
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: