This is an old revision of the document!
Attributes of role
What are an attributes of role?
Role attributes define what additional information can (must) be filled in the user's assigned role. A typical example can be the IP address of a user's end station, which must be filled in in a role assignment request.
Definitions of which attributes are to be filled for the role are managed on the role detail (role attributes tab). Here, you define not only what attributes to show in the request, but also their default values and validation settings. This definition is part of the role approval (off by default).
How it works?
Provisioning of assigned roles
Example script for print assgined roles to the string:
import eu.bcvsolutions.idm.acc.domain.AssignedRoleDto; import eu.bcvsolutions.idm.core.api.dto.IdmRoleDto; if (attributeValue) { String result = ""; for(AssignedRoleDto dto : attributeValue){ result = result + "Role: [" + dto.getRole().getCode() + "] Attributes: [" + dto.getAttributes().toString() + "]"; } return result; } return "";
Output of this script:
Role: [Helpdesk] Attributes: [[:]] Role: [RoleWithOneAttribute] Attributes: [[IP:[192.168.0.122]]] Role: [RoleWithTwoAttributes] Attributes: [[Number of fingers:[20], IP:[168.192.0.10]]]
Read more
Devel guide
Limitations
Enabling of the request mode is controlled only by IdmRole now.
Changes in the request preview are highlighted only on tables. Type of changes are not show on the object details or on EAVs!