Create evaluator with restrictions on one entity

Codeable evaluator is useful for restriction on selected entity. For example if you want that one user see only one another user with defined username or uuid, or for restrict that user see only this role defined by code or uuid.

In this tutorial is described how to admin creates new evaluator that allow see only specific entity.

There is describes how to create evaluator that restrict permission to see only one identity (user).

In first step we must get username of identity that will be restricted by this new evaluator.

For next step must exists role. For this role will be created new evaluator. If you don't have role please create one. For this role go to submenu Permission and then add new evaluator by button Add.

On modal window select entity type as IdmIdentity. Evaluator type select CodeableEvaluator and then will be shown evaluator configuration with one option identifier. Into identifier can be put uuid or username.

And after save new evaluator will be shown in evaluators table:

After this role will be added to user. User will saw identity with username john.doe in all identities.

In first step we must get code of certification authority.

For next step must exists role. For this role will be created new evaluator. If you don't have role please create one. For this role go to submenu Permission and then add new evaluator by button Add.

On modal window select entity type as CrtAuthority. Evaluator type select CodeableEvaluator and then will be shown evaluator configuration with one option identifier. Into identifier can be put uuid or code of certification authority.

And after save new evaluator will be shown in evaluators table:

After this role will be added to user. User will saw only this certification authority.

This restriction of certification authority can be used for add permission for request certificates only by one authority.