Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision 		Previous revision
Next revision Both sides next revision
devel:documentation:security:dev:authorization [2019/07/30 15:39]
kopro [Default settings of permissions for an identity profile] typo 		devel:documentation:security:dev:authorization [2019/08/15 14:48]
kopro [Default settings of permissions for an identity profile]
Line 73: Line 73:
   * ''PASSWORDCHANGE'' - permission is evaluated, when identity's password is changed.   * ''PASSWORDCHANGE'' - permission is evaluated, when identity's password is changed.
   * ''CHANGEPERMISSION'' - permission is evaluated, when identity's permissions is changed => ''CHANGEPERMISSION'' on identity gives permissions ''READ'', ''CREATE'', ''UPDATE'', ''DELETE'' to identity's role requests.   * ''CHANGEPERMISSION'' - permission is evaluated, when identity's permissions is changed => ''CHANGEPERMISSION'' on identity gives permissions ''READ'', ''CREATE'', ''UPDATE'', ''DELETE'' to identity's role requests.
 +  * ''MANUALLYDISABLE''- Deactivate identity manually. Enables bulk action and quick dashboard button.
 +  * ''MANUALLYENABLE''- Activate identity manually. Enables bulk action and quick dashboard button.
  
 ===== Base authorization evaluators ===== ===== Base authorization evaluators =====
Line 293: Line 295:
  
 ==== Default settings of permissions for an identity profile ==== ==== Default settings of permissions for an identity profile ====
 +
 +<note tip>From version 9.7.3 is'n feature manually disabled and manually enabled for user allowed by permission Identity UPDATE. But exits own permissions for each operation (MANUALLYDISABLE and MANUALLYENABLE)</note>
  
 This is a typical setting for the **userRole** - regular user as defined in the [[..:..:..:..:instalacni_balicek#definice_opravneni_v_identity_manageru|installation package]]. This is a typical setting for the **userRole** - regular user as defined in the [[..:..:..:..:instalacni_balicek#definice_opravneni_v_identity_manageru|installation package]].
  • by kucerar