/
a-test-2b.xml
64 lines (63 loc) · 1.92 KB
/
a-test-2b.xml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
<!--
~ Copyright (c) 2010-2017 Evolveum
~
~ Licensed under the Apache License, Version 2.0 (the "License");
~ you may not use this file except in compliance with the License.
~ You may obtain a copy of the License at
~
~ http://www.apache.org/licenses/LICENSE-2.0
~
~ Unless required by applicable law or agreed to in writing, software
~ distributed under the License is distributed on an "AS IS" BASIS,
~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
~ See the License for the specific language governing permissions and
~ limitations under the License.
-->
<role oid="ecb9287d-5852-4bec-9926-4ab1de518e26"
xmlns="http://midpoint.evolveum.com/xml/ns/public/common/common-3"
xmlns:c="http://midpoint.evolveum.com/xml/ns/public/common/common-3"
xmlns:q="http://prism.evolveum.com/xml/ns/public/query-3">
<name>a-test-2b</name>
<c:description>Approved by managers and role approvers (first) - exclusive with test-2a</c:description>
<c:assignment id="1">
<c:targetRef type="c:RoleType">
<filter>
<q:equal>
<q:path>name</q:path>
<q:value>metarole-approval-line-managers</q:value>
</q:equal>
</filter>
</c:targetRef>
</c:assignment>
<c:assignment id="2">
<c:targetRef type="c:RoleType">
<filter>
<q:equal>
<q:path>name</q:path>
<q:value>metarole-approval-role-approvers-all</q:value>
</q:equal>
</filter>
</c:targetRef>
</c:assignment>
<c:assignment id="3">
<c:targetRef type="c:RoleType">
<filter>
<q:equal>
<q:path>name</q:path>
<q:value>metarole-approval-sod</q:value>
</q:equal>
</filter>
</c:targetRef>
</c:assignment>
<assignment>
<policyRule>
<policyConstraints>
<exclusion>
<targetRef oid="fa636d6a-f016-491c-8cd5-cdcbfd516be5" type="RoleType"/> <!-- test-2a -->
</exclusion>
</policyConstraints>
<policyActions>
</policyActions>
</policyRule>
</assignment>
</role>