Mailing-List: contact dev-help@syncope.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@syncope.apache.org
Date: Tue, 16 Aug 2016 07:21:20 +0000 (UTC)
From: "ASF GitHub Bot (JIRA)" <jira@apache.org>
To: dev@syncope.apache.org
Message-ID: <JIRA.12983338.1466966124000.314141.1471332080621@Atlassian.JIRA>
In-Reply-To: <JIRA.12983338.1466966124000@Atlassian.JIRA>
References: <JIRA.12983338.1466966124000@Atlassian.JIRA> <JIRA.12983338.1466966124735@arcas>
Subject: [jira] [Commented] (SYNCOPE-880) Identity Recertification
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
archived-at: Tue, 16 Aug 2016 07:21:22 -0000


    [ https://issues.apache.org/jira/browse/SYNCOPE-880?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15422340#comment-15422340 ] 

ASF GitHub Bot commented on SYNCOPE-880:
----------------------------------------

Github user ilgrosso commented on a diff in the pull request:

    https://github.com/apache/syncope/pull/26#discussion_r74886344
  
    --- Diff: fit/core-reference/src/main/java/org/apache/syncope/fit/core/reference/TestIdentityRecertification.java ---
    @@ -0,0 +1,100 @@
    +/*
    + * Copyright 2016 The Apache Software Foundation.
    + *
    + * Licensed under the Apache License, Version 2.0 (the "License");
    + * you may not use this file except in compliance with the License.
    + * You may obtain a copy of the License at
    + *
    + *      http://www.apache.org/licenses/LICENSE-2.0
    + *
    + * Unless required by applicable law or agreed to in writing, software
    + * distributed under the License is distributed on an "AS IS" BASIS,
    + * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
    + * See the License for the specific language governing permissions and
    + * limitations under the License.
    + */
    +package org.apache.syncope.fit.core.reference;
    +
    +import java.util.Date;
    +import org.apache.syncope.core.persistence.api.dao.ConfDAO;
    +import org.apache.syncope.core.persistence.api.dao.UserDAO;
    +import org.apache.syncope.core.persistence.api.entity.conf.CPlainAttr;
    +import org.apache.syncope.core.persistence.api.entity.user.UPlainAttr;
    +import org.apache.syncope.core.persistence.api.entity.user.UPlainAttrUniqueValue;
    +import org.apache.syncope.core.persistence.api.entity.user.User;
    +import org.apache.syncope.core.provisioning.java.job.AbstractSchedTaskJobDelegate;
    +import org.apache.syncope.core.workflow.activiti.task.Recertify;
    +import org.apache.syncope.core.workflow.api.UserWorkflowAdapter;
    +import org.quartz.JobExecutionException;
    +import org.springframework.beans.factory.annotation.Autowired;
    +
    +public class TestIdentityRecertification extends AbstractSchedTaskJobDelegate {
    --- End diff --
    
    You could always add it to both `MasterContent.xml`, but without schedule, so that it is not run automatically.
    WDYT?
    
    Finally, extending `AbstractSchedTaskJobDelegate` and putting all logic into `doExecute` is considered best-practice, as other things are performed as well (conditionally saving execution, notification and audit, ..).


> Identity Recertification
> ------------------------
>
>                 Key: SYNCOPE-880
>                 URL: https://issues.apache.org/jira/browse/SYNCOPE-880
>             Project: Syncope
>          Issue Type: New Feature
>          Components: core
>            Reporter: Nicola Scendoni
>            Assignee: Nicola Scendoni
>            Priority: Minor
>             Fix For: 2.0.0
>
>
> Identify Re-certification is required for many national and international standards like SOX, GxP, etc.
> The idea is to implement one scheduled task that filter users basing on some attributes (example: last recertification date, role,...) and move then on one state "to be certified" and assign one task to some group that has the responsibility to recertified the user, or delete it from the system.
> Some report should report evidence about when the users have been recertified and who was the certifier.
>  
> This feature would be also the starting point to create account, role and groups re-certifications.


--
This message was sent by Atlassian JIRA
(v6.3.4#6332)