incubator-syncope-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Bob Lannoy <bob.lan...@gmail.com>
Subject Delegation & console
Date Mon, 26 Mar 2012 14:56:32 GMT
Hi,

I've been testing Syncope and I'm interested in the delegation
mechanism as described in
https://cwiki.apache.org/confluence/display/SYNCOPE/Authentication+and+authorization.

Suppose I have a role structure as follows:
root
- org1 (role_10)
-- user (role_12)
-- admin (role_11)
- org2
-- user
--admin

If I assign
role_11 = user_list/view/create/delete/update/create & role_10 & role_12

I would expect that a user in role_11 would be able to create a user.
Through the console however that user cannot create users.
Is this something that has to be done through the rest-interface directly?

regards

Bob

Mime
View raw message