Differences
This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision Next revision Both sides next revision | ||
devel:documentation:security:dev:authorization [2020/04/21 12:04] tomiskar [Default settings of permissions for an identity profile] |
devel:documentation:security:dev:authorization [2020/04/22 11:22] tomiskar [Settings of permissions of identity basic attributes] |
||
---|---|---|---|
Line 72: | Line 72: | ||
* '' | * '' | ||
- | * '' | ||
- | * '' | ||
* '' | * '' | ||
* '' | * '' | ||
+ | * '' | ||
+ | * '' | ||
+ | * '' | ||
+ | * '' | ||
+ | * '' | ||
+ | * '' | ||
+ | * '' | ||
+ | * '' | ||
==== Role==== | ==== Role==== | ||
Line 85: | Line 91: | ||
* '' | * '' | ||
+ | |||
+ | ==== Identity contract ==== | ||
+ | |||
+ | * '' | ||
===== Base authorization evaluators ===== | ===== Base authorization evaluators ===== | ||
Line 447: | Line 457: | ||
* Permission to admin code list items by code lists: Code lists - items (IdmCodeListItem) | - | [[# | * Permission to admin code list items by code lists: Code lists - items (IdmCodeListItem) | - | [[# | ||
* Permission to admin code list extended attributes: Forms - attributes (IdmFormAttribute) | - | [[# | * Permission to admin code list extended attributes: Forms - attributes (IdmFormAttribute) | - | [[# | ||
+ | |||
+ | ==== Settings of permissions of identity basic attributes ==== | ||
+ | |||
+ | If we want to enable for currently logged identity update all basic identity attributes (e.g. login, first name, surname), the authorization policies can be set as follows: | ||
+ | * Permission to update identity: Users (IdmIdentity) | Update, Change phone, Change personal number, Change note, Change login, Change user type (projection), | ||
+ | |||
+ | <note tip>Can be combined with [[# | ||
==== Settings of permissions of identity form (extended) attribute values ==== | ==== Settings of permissions of identity form (extended) attribute values ==== |