...
An example of a campaign definition (taken from samples/certification/def-all-user-assignments.xml file):
Code Block | ||
---|---|---|
| ||
<accessCertificationDefinition xmlns="http://midpoint.evolveum.com/xml/ns/public/common/common-3" xmlns:q="http://prism.evolveum.com/xml/ns/public/query-3" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <name>All user assignments</name> <description>Certifies all users' assignments. Everything is certified by the administrator.</description> <handlerUri>http://midpoint.evolveum.com/xml/ns/public/certification/handlers-3#direct-assignment</handlerUri> <stageDefinition> <number>1</number> <name>Administrator's review</name> <description>In this stage, the administrator has to review all the assignments of all users.</description> <duration>P14D</duration> <!-- 14 days --> <notifyBeforeDeadline>PT48H</notifyBeforeDeadline> <!-- 48 hours --> <notifyBeforeDeadline>PT12H</notifyBeforeDeadline> <notifyOnlyWhenNoDecision>true</notifyOnlyWhenNoDecision> <!-- this is the default --> <reviewerSpecification> <defaultReviewerRef oid="00000000-0000-0000-0000-000000000002" type="UserType" /> <!-- administrator --> </reviewerSpecification> </stageDefinition> <remediationDefinition> <style>automated</style> </remediationDefinition> </accessCertificationDefinition> |
...
Individual operations are authorized in a specific way. For detailed information, please see Access Certification Security page.