Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Assignment and unassignment authorization can be applied to inducements using the very same principles. There is an authorization clause orderConstraints that controls whether authorization applies to assignment, inducement or both.

Code Block
languagexml
        <authorization>
            <action>http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#assign</action>
            <action>http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#unassign</action>
            ... object, target and so on ...
            <orderConstraints>
                <orderMin>0</orderMin> <!-- order=0 means assignment -->
                <orderMax>unbounded</orderMax> <!-- order=1,2,3... means inducements -->
            </orderConstraints>
        </authorization>

...