Differences

This shows you the differences between two versions of the page.

--- devel:documentation:adm:delegation [2020/07/02 11:19]
svandav [Delegation type]
+++ devel:documentation:adm:delegation [2020/10/06 15:30] (current)
svandav [Authorization policies]
@@ Line 10: / Line 10: @@
 {{ :devel:documentation:adm:new-delegation.png?600 |}}
+==== Delegations on the user detail ====
+A new delegation tab has been added to the user detail. Here the user can create a new delegation and above all he sees an overview of all his delegations and also the delegations that delegate to him.
+{{ :devel:documentation:adm:use-delegation-tab.png?800 |}}
+<note important>All types of delegations are displayed here, including manually delegated tasks.</note>
+<note important>As a **delegator**, a user can select any user to whom he has the **autocomplete right** (he can select it in the selectbox).</note>
+==== List of delegated tasks ====
+In the detail of the delegation it is possible to see all tasks that have been delegated within the given delegation. Ie. as a user you have an overview of how many tasks have been delegated and in what state they are now.
+The state can take the following states:
+  * **In progress** - The task was delegated and isn't completed yet.
+  * **Executed** - The task was delegated and completed.
+  * **Canceled** - The task was delegated and canceled (workflow was deleted).
+{{ :devel:documentation:adm:delegation-instances.png?800 |}}
 ==== Delegation type ====
@@ Line 33: / Line 55: @@
 <note tip>The default delegation type delegates all **approval tasks**.</note>
-==== Delegations on the user detail ====
-A new delegation tab has been added to the user detail. Here the user can create a new delegation and above all he sees an overview of all his delegations and also the delegations that delegate to him.
-{{ :devel:documentation:adm:use-delegation-tab.png?800 |}}
-<note important>All types of delegations are displayed here, including manually delegated tasks.</note>
 ===== Manual delegation =====
@@ Line 73: / Line 87: @@
 <note important>Tasks can be delegated to any user who can be selected in the select box. In other words, the user can delegate to a user to whom he has the **autocomplete** permission.</note>
-==== Future improvements ====
+===== Authorization policies =====
+Default settings of permissions for delegations are defined in the role '**Delegation (delegationRole)**'.
+<note tip>You can see a detailed configuration of evaluators with comments here:
+[[https://github.com/bcvsolutions/CzechIdMng/blob/develop/Realization/backend/core/core-impl/src/main/java/eu/bcvsolutions/idm/core/model/event/processor/module/InitDelegationRoleProcessor.java#L106-L202
+|InitDelegationRoleProcessor]]</note>
+===== Future improvements =====
 <note tip >The manually created delegation definition should be deleted after deleting the last link to the task.</note>
 <note tip >After reassigning the task, also send a notification to the delegator.</note>
+===== Limitations =====
+<note important>By default (in standard process for **change permissions**), the rule is that if the logged-in user is the implementer of the request (the one who submitted it) and at the same time is one of approvers, then this task is **skipped** (approval is assumed). However, **this rule does not apply in the case of delegation** (ie if the delegate is both the approver and the implementer, the task will be created and assigned).
+</note>
+<note important>If one approval task is delegated more than once, or for more approvers, then **only the last delegation's business card** is displayed in the task detail.</note>
+<note important>**Delegation works only on first level**. So if user **A** delegates to user **B**, and at same time user **B** delegates to user **C**, then it doesn't mean that all tasks from **A** are now delegated to user **C**!</note>
 ===== Main guide =====
   * [[..:delegation|]]