| Both sides previous revision
Previous revision
Next revision
|
Previous revision
|
devel:documentation:adm:delegation [2020/07/02 13:36]
svandav |
devel:documentation:adm:delegation [2020/10/06 15:30] (current)
svandav [Authorization policies] |
| |
| <note important>All types of delegations are displayed here, including manually delegated tasks.</note> | <note important>All types of delegations are displayed here, including manually delegated tasks.</note> |
| | |
| | <note important>As a **delegator**, a user can select any user to whom he has the **autocomplete right** (he can select it in the selectbox).</note> |
| |
| ==== List of delegated tasks ==== | ==== List of delegated tasks ==== |
| <note important>Tasks can be delegated to any user who can be selected in the select box. In other words, the user can delegate to a user to whom he has the **autocomplete** permission.</note> | <note important>Tasks can be delegated to any user who can be selected in the select box. In other words, the user can delegate to a user to whom he has the **autocomplete** permission.</note> |
| |
| ==== Future improvements ==== | |
| | ===== Authorization policies ===== |
| | |
| | Default settings of permissions for delegations are defined in the role '**Delegation (delegationRole)**'. |
| | |
| | <note tip>You can see a detailed configuration of evaluators with comments here: |
| | [[https://github.com/bcvsolutions/CzechIdMng/blob/develop/Realization/backend/core/core-impl/src/main/java/eu/bcvsolutions/idm/core/model/event/processor/module/InitDelegationRoleProcessor.java#L106-L202 |
| | |InitDelegationRoleProcessor]]</note> |
| | |
| | |
| | ===== Future improvements ===== |
| <note tip >The manually created delegation definition should be deleted after deleting the last link to the task.</note> | <note tip >The manually created delegation definition should be deleted after deleting the last link to the task.</note> |
| <note tip >After reassigning the task, also send a notification to the delegator.</note> | <note tip >After reassigning the task, also send a notification to the delegator.</note> |
| |
| | ===== Limitations ===== |
| | |
| | <note important>By default (in standard process for **change permissions**), the rule is that if the logged-in user is the implementer of the request (the one who submitted it) and at the same time is one of approvers, then this task is **skipped** (approval is assumed). However, **this rule does not apply in the case of delegation** (ie if the delegate is both the approver and the implementer, the task will be created and assigned). |
| | </note> |
| | |
| | <note important>If one approval task is delegated more than once, or for more approvers, then **only the last delegation's business card** is displayed in the task detail.</note> |
| | |
| | <note important>**Delegation works only on first level**. So if user **A** delegates to user **B**, and at same time user **B** delegates to user **C**, then it doesn't mean that all tasks from **A** are now delegated to user **C**!</note> |
| |
| ===== Main guide ===== | ===== Main guide ===== |
| * [[..:delegation|]] | * [[..:delegation|]] |
| |