Differences
This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision Next revision Both sides next revision | ||
devel:documentation:modules_extras [2020/04/23 08:09] klementm [Notification about the end of identity's last contract] |
devel:documentation:modules_extras [2021/05/27 11:58] kopro [CzechIdM - extras] update version |
||
---|---|---|---|
Line 2: | Line 2: | ||
CzechIdM - extras contains various features, which are not suited to be in any other module. List of the currently supported features is below. | CzechIdM - extras contains various features, which are not suited to be in any other module. List of the currently supported features is below. | ||
- | Currently supported CzechIdM version : 9.2.2 | + | Currently supported CzechIdM version : 11.0.x |
[[https:// | [[https:// | ||
+ | |||
+ | |||
+ | ===== Table of compatible versions ===== | ||
+ | |||
+ | ^ Extras version | ||
+ | | 2.5.0 | idm-core-10.3.3 | ||
+ | | 2.6.0 | idm-core-10.4.4 | ||
+ | | 2.6.1 | idm-core-10.4.8 | ||
+ | | 2.7.0 | idm-core-10.4.9 | ||
+ | |||
+ | |||
===== Developing and releasing ===== | ===== Developing and releasing ===== | ||
How to develop a new feature in extras: | How to develop a new feature in extras: | ||
Line 49: | Line 60: | ||
===== Automatic role definitions - Import of data from CSV LRT ===== | ===== Automatic role definitions - Import of data from CSV LRT ===== | ||
Documentation is available here: [[tutorial: | Documentation is available here: [[tutorial: | ||
+ | |||
+ | ===== Automatic role definitions - Import all rules LRT ===== | ||
+ | Since module version **1.9.0**. | ||
+ | Documentation is available here: [[tutorial: | ||
===== Assign roles to contract EAV - Import of data from CSV LRT ===== | ===== Assign roles to contract EAV - Import of data from CSV LRT ===== | ||
Line 92: | Line 107: | ||
Edit: full IdmIdentityDto was added for use in a template in 1.7.0 | Edit: full IdmIdentityDto was added for use in a template in 1.7.0 | ||
+ | |||
Edit: Support for technical identities added for use in version 1.9.0 | Edit: Support for technical identities added for use in version 1.9.0 | ||
===== Get titles before and after ===== | ===== Get titles before and after ===== | ||
Almost every project receive all titles in one string and IdM allow separates titles before and after. For this case was created in *ExtrasUtils* two methods *getTitlesAfter* and *getTitlesBefore*. And transformation scripts *extrasGetTitlesBefore* and *extrasGetTitlesAfter*, | Almost every project receive all titles in one string and IdM allow separates titles before and after. For this case was created in *ExtrasUtils* two methods *getTitlesAfter* and *getTitlesBefore*. And transformation scripts *extrasGetTitlesBefore* and *extrasGetTitlesAfter*, | ||
- | Dictionary with titles can be setup by configuration properties. Default values exists. | + | Dictionary with titles can be setup by configuration properties. Default values exists |
+ | < | ||
+ | idm.sec.extras.configuration.titlesAfter=Ph.D., | ||
+ | idm.sec.extras.configuration.titlesBefore=Bc., | ||
+ | </ | ||
+ | in version 2.8.0 was added the option to select a separator for source string and for titles before and after values in IdM. | ||
< | < | ||
- | idm.sec.extras.configuration.titlesAfter=" | + | idm.sec.extras.configuration.titlesSourceSeparator - a character, that separates titles in the source. Default" " |
- | idm.sec.extras.configuration.titlesBefore=" | + | idm.sec.extras.configuration.titlesBeforeSeparator - titles before separator for IdM. Default", " |
+ | idm.sec.extras.configuration.titlesAfterSeparator - titles before separator for IdM. Default", " | ||
</ | </ | ||
Line 107: | Line 129: | ||
===== Groups synchronization workflow | ===== Groups synchronization workflow | ||
- | Since module version **1.4.0** | + | Since module version **1.4.0** |
+ | |||
+ | Documentation for configuration is available in [[tutorial: | ||
+ | |||
+ | Note: the workflow extrasSyncRoleLdap depends on some services implemented in the extras module, so to use this workflow, you must deploy the whole module to CzechIdM. | ||
- | Documentation for configuration is available [[tutorial: | ||
===== Workflow to disable contract on MISSING_ACCOUNT ===== | ===== Workflow to disable contract on MISSING_ACCOUNT ===== | ||
Setting this workflow (extrasDisableMissingContract) as workflow for action in contract reconciliation will disable contract, when its being synchronized. It can be used for example, in situations when contracts are being deleted from source data after expiration and they keep being stuck in MISSING_ACCOUNT state. | Setting this workflow (extrasDisableMissingContract) as workflow for action in contract reconciliation will disable contract, when its being synchronized. It can be used for example, in situations when contracts are being deleted from source data after expiration and they keep being stuck in MISSING_ACCOUNT state. | ||
+ | |||
+ | Note: When using this workflow, please consider the possibility that the contracts may " | ||
===== Groups membership in multi domain (cross domain) AD environment ===== | ===== Groups membership in multi domain (cross domain) AD environment ===== | ||
Line 118: | Line 146: | ||
Documentation is available [[tutorial: | Documentation is available [[tutorial: | ||
+ | |||
+ | ===== Evaluator (permissions) for identities that has relationship on defined organization unit ===== | ||
+ | Since module version **1.9.0**. **Available only on LTS version!** | ||
+ | |||
+ | Documentation is available [[devel: | ||
+ | |||
+ | ===== Evaluator (permissions) for roles that is inside defined role catalogue ===== | ||
+ | Since module version **1.9.0**. **Available only on LTS version!** | ||
+ | |||
+ | Documentation is available [[devel: | ||
+ | |||
+ | ===== Import code list and it's items ===== | ||
+ | Since module version **1.9.0** and **2.4.0** | ||
+ | |||
+ | Documentation is available [[devel: | ||
+ | |||
+ | ===== Evaluators (permissions) for Identities and Contracts which are both subordinate and have given projection ===== | ||
+ | Since module version **2.4.0**. | ||
+ | |||
+ | Documentation is available [[devel: | ||
+ | |||
+ | ===== Workflows for approval of role assignment ===== | ||
+ | Since module version **2.3.0** | ||
+ | |||
+ | Documentation is available [[tutorial: | ||
+ | |||
+ | ===== Script for soft abbreviate strings (extrasAbbreviateString) ===== | ||
+ | Since module version **3.2.0** | ||
+ | |||
+ | Script called **extrasAbbreviateString** abbreviate given string by default with maximum length 255. Maximum length can be defined by adding parameter **maximum**. For example: | ||
+ | * .addParameter(' | ||
+ | |||
+ | Result examples: | ||
+ | * "Hi how are you" - maximum: 9 - "Hi how" | ||
+ | * "Ing. Mgr. at Mgr. MBA" - maximum: 20 - "Ing. Mgr. at Mgr." | ||
+ | * " | ||
+ | |||
+ |