Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision 		Previous revision
Last revision Both sides next revision
devel:documentation:adm:delegation [2020/07/02 13:36]
svandav 		devel:documentation:adm:delegation [2020/07/15 14:49]
svandav [Limitations]
Line 18: Line 18:
  
 <note important>All types of delegations are displayed here, including manually delegated tasks.</note> <note important>All types of delegations are displayed here, including manually delegated tasks.</note>
 +
 +<note important>As a **delegator**, a user can select any user to whom he has the **autocomplete right** (he can select it in the selectbox).</note>
  
 ==== List of delegated tasks ==== ==== List of delegated tasks ====
Line 85: Line 87:
 <note important>Tasks can be delegated to any user who can be selected in the select box. In other words, the user can delegate to a user to whom he has the **autocomplete** permission.</note> <note important>Tasks can be delegated to any user who can be selected in the select box. In other words, the user can delegate to a user to whom he has the **autocomplete** permission.</note>
  
-==== Future improvements ====+ 
 +===== Authorization policies ===== 
 + 
 +  * Permission to delegation by permission on delegate: **Delegation (IdmDelegationDefinition)** | Transitive | DelegationDefinitionByDelegateEvaluator. 
 +  * Permission to delegation by permission on delegator: **Delegation (IdmDelegationDefinition)** | Transitive | DelegationDefinitionByDelegatorEvaluator. 
 +  * Permission to delegation by permission on delegator's contract: **Delegation (IdmDelegationDefinition)** | Transitive | DelegationDefinitionByDelegatorContractEvaluator. 
 +  * Permission to delegation instances: **Delegation (IdmDelegation)** | Transitive | DelegationByDelegationDefinitionEvaluator. 
 + 
 + 
 +===== Future improvements =====
 <note tip >The manually created delegation definition should be deleted after deleting the last link to the task.</note> <note tip >The manually created delegation definition should be deleted after deleting the last link to the task.</note>
 <note tip >After reassigning the task, also send a notification to the delegator.</note> <note tip >After reassigning the task, also send a notification to the delegator.</note>
  
 +===== Limitations =====
 +
 +<note important>By default (in standard process for **change permissions**), the rule is that if the logged-in user is the implementer of the request (the one who submitted it) and at the same time is one of approvers, then this task is **skipped** (approval is assumed). However, **this rule does not apply in the case of delegation** (ie if the delegate is both the approver and the implementer, the task will be created and assigned).
 +</note>
 +
 +<note important>If one approval task is delegated more than once, or for more approvers, then **only the last delegation's business card** is displayed in the task detail.</note>
 +
 +<note important>**Delegation works only on first level**. So if user **A** delegates to user **B**, and at same time user **B** delegates to user **C**, then it doesn't mean that all tasks from **A** are now delegated to user **C**!</note>
  
 ===== Main guide ===== ===== Main guide =====
   * [[..:delegation|]]   * [[..:delegation|]]
  
  • by svandav