Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision | Next revision Both sides next revision | ||
|
devel:documentation:security:dev:authorization [2021/06/11 06:46] 127.0.0.1 external edit |
devel:documentation:security:dev:authorization [2021/06/16 08:38] husniko [RoleGuaranteeEvaluator] |
||
|---|---|---|---|
| Line 205: | Line 205: | ||
| Evaluator can be used for UC, when role guarantee can assign his roles to users (@since 11.1.0). The authorization policies can be set as follows: | Evaluator can be used for UC, when role guarantee can assign his roles to users (@since 11.1.0). The authorization policies can be set as follows: | ||
| - | * Permission to work with guaranteed roles: Roles (IdmRole) | View in select box (autocomplete), | + | * Permission to work with guaranteed roles: Roles (IdmRole) | View in select box (autocomplete), |
| * Permission to all identities: Users (IdmIdentity) | Read | BasePermissionEvaluator | * Permission to all identities: Users (IdmIdentity) | Read | BasePermissionEvaluator | ||
| * Permission to assign new role to all contracts: Contracted positions (IdmIdentityContract) | Can be requested | BasePermissionEvaluator | * Permission to assign new role to all contracts: Contracted positions (IdmIdentityContract) | Can be requested | BasePermissionEvaluator | ||