This is an old revision of the document!


Copying roles from a user

Copying roles from a user to user is usefull feature for copy/share permission between roles. Main purpose is facilitated of adding manually added roles to another user.

In next steps is described how to works the feature.

The feature is available on role request detail as new button.

For show this button and create new role request you will need permissions for change user permission, create request and etc. for more information visit authorization dokuwiki page.

Whole copying is shown on one modal window. On this window you can select user from who will be roles copied select box with label: User select

After you select the user you can also select contract for specific set of assigned roles on selected user.

Roles that will be shown is assigned only the selected contract. Contract can be deselected and then is shown all assigned roles trough all contract.

Now you have to select a contract to assign new roles. This field is mandatory.

Bellow you can also specific validity for newly assigned roles.

For manually assigned roles is possible change validity. Automatically assigned roles has validity from contract.

If some assigned roles has role parameters is possible also copying the parameters except values. This option is by default disabled, you can activate it by check the checkbox.

In last part of the modal window exists component for selecting assigned roles and copy it.

Between table Roles select from user and Selected roles. Exists these buttons:

  • Add all roles that exists in table Roles select from user to table Selected roles,
  • add only selected roles that exists in table Roles select from user to table Selected roles,
  • remove only selected roles that exists in table Selected roles,
  • remove all roles that exists in table Selected roles.

Example:

Is possible that in assigned roles exists roles that is called business. These roles has probably some subroles. Subroles is assigned automatically after is assigned parent (business) role.

In default settings is shown only directly assigned roles. This options can be changed by checkbox Show only roles assigned directly.

Beware if you assign business role and their sub role directly. User will have duplicity in assigned roles. The subrole will be assigned twice.
  • - directly assigned application role,
  • - role assigned by automatic role configuration (by tree structure or attribute),
  • - directly assigned business role. Defined sub roles will be assigned together with this role,
  • - role assigned by business role (sub role).

More about roles can be found there

  • by kopro