Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision Both sides next revision
devel:documentation:security:dev:authorization [2021/06/16 08:38]
husniko [RoleGuaranteeEvaluator] 		devel:documentation:security:dev:authorization [2021/06/16 10:14]
husniko [RoleGuaranteeEvaluator]
Line 204: Line 204:
 This evaluator solves both ways (or). This evaluator solves both ways (or).
  
-Evaluator can be used for UC, when role guarantee can assign his roles to users (@since 11.1.0). The authorization policies can be set as follows:+Evaluator can be used for UC, when role guarantee can assign his roles to users (@since 11.1.0). The authorization policies have to be set as follows:
   * Permission to work with guaranteed roles: Roles (IdmRole) | View in select box (autocomplete), Read, Update, Delete, Can be requested, Change roles | RoleGuaranteeEvaluator   * Permission to work with guaranteed roles: Roles (IdmRole) | View in select box (autocomplete), Read, Update, Delete, Can be requested, Change roles | RoleGuaranteeEvaluator
   * Permission to all identities: Users (IdmIdentity) | Read | BasePermissionEvaluator   * Permission to all identities: Users (IdmIdentity) | Read | BasePermissionEvaluator
  • by koulaj