Differences

This shows you the differences between two versions of the page.

--- devel:documentation:security:dev:authorization [2020/10/06 15:25]
svandav [Default settings of permissions for an identity profile]
+++ devel:documentation:security:dev:authorization [2021/06/11 06:29]
127.0.0.1 external edit
@@ Line 86: / Line 86: @@
   * ''CANBEREQUESTED'' - role, which can be requested. Used in role request and bulk actions for assign role.
+  * ''CHANGEPERMISSION'' - @since 11.1.0 - create role request for changing identity permissions on related role - usable for role guarantees.
 ==== Identity role====
@@ Line 95: / Line 95: @@
   * ''CHANGEPERMISSION'' - permission is evaluated, when identity's permissions is changed => ''CHANGEPERMISSION'' on contract gives permissions ''READ'', ''CREATE'', ''UPDATE'', ''DELETE'' to identity's role requests.
+  * ''CANBEREQUESTED'' - @since 11.1.0 create role request for changing (ADD only) identity permissions on related contract.
 ===== Cache =====
@@ Line 470: / Line 471: @@
 <note tip>You can see a detailed configuration of evaluators with comments here:
-[[https://github.com/bcvsolutions/CzechIdMng/blob/c5887f9a96344f5e96e6db7cc8d3da228810ca97/Realization/backend/core/core-impl/src/main/java/eu/bcvsolutions/idm/core/model/event/processor/module/InitDelegationRoleProcessor.java#L106-L202
+[[https://github.com/bcvsolutions/CzechIdMng/blob/develop/Realization/backend/core/core-impl/src/main/java/eu/bcvsolutions/idm/core/model/event/processor/module/InitDelegationRoleProcessor.java#L106-L202
 |InitDelegationRoleProcessor]]</note>