directory-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Shawn McKinney (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (FC-119) Allow pushing constraints to user role assignments when updating role constraint
Date Tue, 15 Sep 2015 14:37:47 GMT

    [ https://issues.apache.org/jira/browse/FC-119?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14745536#comment-14745536
] 

Shawn McKinney commented on FC-119:
-----------------------------------

I wouldn't call the relationship between the temporal constraints on a role and corresponding
user-roles as inheritance.  Rather the default is set on the role and the administrator may
change those settings on assignment.

I agree this is confusing and needs to be clarified.  I believe the best way is to add a 'push'
operation on the role page in fortress-web.  That would make the distinction between what
is on the role, and what is on the user-role explicit to the end user and hopefully will help
eliminate confusion.

Incidentally this same behavior applies between admin-roles and user-admin-roles so same push
functionality should work there as well.

Maybe we also add some way to scope the push.  There could be a drop-down where user-orgs
are selected for target of push.  How else can this be done?  I don't think you necessarily
want to push the role temporal to all user's.  Think of shift workers like nurses.  They all
have the same role, e.g. floor-nurse, but some work days and some work nights.  Pushing the
same constraints to all would essentially bar one or the other from signing on.



> Allow pushing constraints to user role assignments when updating role constraint
> --------------------------------------------------------------------------------
>
>                 Key: FC-119
>                 URL: https://issues.apache.org/jira/browse/FC-119
>             Project: FORTRESS
>          Issue Type: New Feature
>            Reporter: Chris Pike
>            Priority: Minor
>
> It is my understanding the user role assignments inherit the temporal constraints from
the role and that updating the temporal constraints on the role after the assignment has no
effect on the user role assignment constraint. 
> This is confusing to someone updating temporal role constraints who doesn't understand
this behaviour. It need to be made clearer in the UI and may be beneficial to provide a mechanism
to push updated constraints to the user role assignments.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message