Uploaded image for project: 'MidPoint'
  1. MidPoint
  2. MID-6268

Exclusion policy removes all targets, including the correct one

    XMLWordPrintable

Details

    • Bug
    • Status: Closed
    • Minor
    • Resolution: Fixed
    • 4.0.2
    • 4.2, 4.0.3
    • None
    • None
    • Active subscription
    • v4.0.2-130-g4100c58275

    Description

      Observed behaviour:

      • exclusion policy rule does not take into account indirect assignment

      Use case:

      • setup
        • Business role induces Application role
        • Application role has assigned Exclusion metarole
        • Exclusion metarole has one policyRule exclusion for Application role (for keeping it simple, more in real scenario)
        • User has assigned Business role
      • action
        • User is assigned Application role directly
      • expected behaviour
        • User has assigned both Business role and Application role
      •  result
        • User loses Business role, only Application role is kept
      • this works either way (BR->AR, AR->BR)

       Steps to reproduce:

      • import 3 attached files
      • create new user, just name+default
      • assign Business role to user + save
      • assign Application role to user,
        • click preview - you will see that Business role is about to be removed
        • click Save
      • user has Application role assgined, but incorrectly loses Business role.

       

      Please note that direct assignment works ok, in use case above:

      • if user has assigned Application role directly, 
      • after assigning Application role with different metadata, 
      • user has two Application roles assigned.

       

      Attachments

        1. application-role.xml
          1 kB
        2. business-role.xml
          0.9 kB
        3. exclusion-metarole.xml
          1 kB

        Activity

          People

            petr.gasparik Petr Gašparík
            petr.gasparik Petr Gašparík
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: