From 1645181696353a1b83023848e408c6933a8dcc47 Mon Sep 17 00:00:00 2001
From: Pavol Mederly <mederly@evolveum.com>
Date: Fri, 13 Jan 2017 15:30:13 +0100
Subject: [PATCH] First version of "strings" story resources.

---
 .../orgs/0-org-monkey-island-modified.xml     | 134 ++++++++++++++++++
 .../test/resources/strings/orgs/1-teams.xml   |  21 +++
 .../strings/orgs/security-approvers.xml       |  25 ++++
 .../resources/strings/orgs/sod-approvers.xml  |  25 ++++
 .../roles/metarole-approval-line-managers.xml |  46 ++++++
 .../metarole-approval-role-approvers-all.xml  |  42 ++++++
 ...metarole-approval-role-approvers-first.xml |  42 ++++++
 .../roles/metarole-approval-security.xml      |  52 +++++++
 .../strings/roles/metarole-approval-sod.xml   |  52 +++++++
 .../test/resources/strings/roles/test-1.xml   |  53 +++++++
 .../resources/strings/users/barkeeper.xml     |  52 +++++++
 .../src/test/resources/strings/users/bob.xml  |  28 ++++
 .../test/resources/strings/users/carla.xml    |  36 +++++
 .../test/resources/strings/users/cheese.xml   |  58 ++++++++
 .../src/test/resources/strings/users/chef.xml |  53 +++++++
 .../test/resources/strings/users/elaine.xml   |  66 +++++++++
 .../test/resources/strings/users/guybrush.xml |  35 +++++
 .../test/resources/strings/users/lechuck.xml  |  30 ++++
 18 files changed, 850 insertions(+)
 create mode 100644 testing/story/src/test/resources/strings/orgs/0-org-monkey-island-modified.xml
 create mode 100644 testing/story/src/test/resources/strings/orgs/1-teams.xml
 create mode 100644 testing/story/src/test/resources/strings/orgs/security-approvers.xml
 create mode 100644 testing/story/src/test/resources/strings/orgs/sod-approvers.xml
 create mode 100644 testing/story/src/test/resources/strings/roles/metarole-approval-line-managers.xml
 create mode 100644 testing/story/src/test/resources/strings/roles/metarole-approval-role-approvers-all.xml
 create mode 100644 testing/story/src/test/resources/strings/roles/metarole-approval-role-approvers-first.xml
 create mode 100644 testing/story/src/test/resources/strings/roles/metarole-approval-security.xml
 create mode 100644 testing/story/src/test/resources/strings/roles/metarole-approval-sod.xml
 create mode 100644 testing/story/src/test/resources/strings/roles/test-1.xml
 create mode 100644 testing/story/src/test/resources/strings/users/barkeeper.xml
 create mode 100644 testing/story/src/test/resources/strings/users/bob.xml
 create mode 100644 testing/story/src/test/resources/strings/users/carla.xml
 create mode 100644 testing/story/src/test/resources/strings/users/cheese.xml
 create mode 100644 testing/story/src/test/resources/strings/users/chef.xml
 create mode 100644 testing/story/src/test/resources/strings/users/elaine.xml
 create mode 100644 testing/story/src/test/resources/strings/users/guybrush.xml
 create mode 100644 testing/story/src/test/resources/strings/users/lechuck.xml

diff --git a/testing/story/src/test/resources/strings/orgs/0-org-monkey-island-modified.xml b/testing/story/src/test/resources/strings/orgs/0-org-monkey-island-modified.xml
new file mode 100644
index 00000000000..b84cdd6d0b9
--- /dev/null
+++ b/testing/story/src/test/resources/strings/orgs/0-org-monkey-island-modified.xml
@@ -0,0 +1,134 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright (c) 2010-2017 Evolveum
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~     http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<objects xmlns='http://midpoint.evolveum.com/xml/ns/public/common/common-3'
+		 xmlns:c='http://midpoint.evolveum.com/xml/ns/public/common/common-3'
+		 xmlns:org='http://midpoint.evolveum.com/xml/ns/public/common/org-3'>
+
+	<!-- Functional organizational structure -->
+
+	<org oid="00000000-8888-6666-0000-100000000001">
+		<name>F0001</name>
+		<description>The office of the most respectful Governor.</description>
+		<displayName>Governor Office</displayName>
+		<identifier>0001</identifier>
+		<orgType>functional</orgType>
+		<costCenter>CC0</costCenter>
+		<locality>The Governor's Mansion</locality>
+	</org>
+
+	<org oid="00000000-8888-6666-0000-100000000002">
+		<name>F0002</name>
+		<description>Defending the scum since the ancient times.</description>
+		<parentOrgRef oid="00000000-8888-6666-0000-100000000001" type="c:OrgType"/>
+		<assignment id="1">
+			<targetRef oid="00000000-8888-6666-0000-100000000001" type="c:OrgType"/>
+		</assignment>
+		<displayName>Ministry of Defense</displayName>
+		<identifier>0002</identifier>
+		<orgType>functional</orgType>
+		<locality>The towers, bastions and bars</locality>
+
+	</org>
+
+	<org oid="00000000-8888-6666-0000-100000000003">
+		<name>F0003</name>
+		<description>Offending. Anyone. Anywhere.</description>
+		<parentOrgRef oid="00000000-8888-6666-0000-100000000001" type="c:OrgType"/>
+		<assignment id="1">
+			<targetRef oid="00000000-8888-6666-0000-100000000001" type="c:OrgType"/>
+		</assignment>
+		<displayName>Ministry of Offense</displayName>
+		<identifier>0003</identifier>
+		<orgType>functional</orgType>
+		<costCenter>CC666</costCenter>
+	</org>
+
+	<org oid="00000000-8888-6666-0000-100000000004">
+		<name>F0004</name>
+		<description>Why is the rum always gone?</description>
+		<parentOrgRef oid="00000000-8888-6666-0000-100000000001" type="c:OrgType"/>
+		<assignment id="1">
+			<targetRef oid="00000000-8888-6666-0000-100000000001" type="c:OrgType"/>
+		</assignment>
+		<displayName>Ministry of Rum</displayName>
+		<identifier>0004</identifier>
+		<orgType>functional</orgType>
+		<costCenter>CCRUM</costCenter>
+	</org>
+
+	<org oid="00000000-8888-6666-0000-100000000005">
+		<name>F0005</name>
+		<description>Swashing, buckling and insulting. Hard.</description>
+		<parentOrgRef oid="00000000-8888-6666-0000-100000000003" type="c:OrgType"/>
+		<assignment id="1">
+			<targetRef oid="00000000-8888-6666-0000-100000000003" type="c:OrgType"/>
+		</assignment>
+		<displayName>Swashbuckler Section</displayName>
+		<identifier>0005</identifier>
+		<orgType>functional</orgType>
+	</org>
+
+	<org oid="00000000-8888-6666-0000-100000000006">
+		<name>F0006</name>
+		<description>Hosting the worst scumm of the Caribbean.</description>
+		<parentOrgRef oid="00000000-8888-6666-0000-100000000003" type="c:OrgType"/>
+		<parentOrgRef oid="00000000-8888-6666-0000-100000000004" type="c:OrgType"/>
+		<assignment id="1">
+			<targetRef oid="00000000-8888-6666-0000-100000000003" type="c:OrgType"/>
+		</assignment>
+		<assignment id="2">
+			<targetRef oid="00000000-8888-6666-0000-100000000004" type="c:OrgType"/>
+		</assignment>
+		<displayName>Scumm Bar</displayName>
+		<identifier>0006</identifier>
+		<orgType>functional</orgType>
+		<locality>Mêlée Island</locality>
+	</org>
+
+	<!-- Project organizational structure -->
+
+	<org oid="00000000-8888-6666-0000-200000000000">
+		<name>PRoot</name>
+		<description>Project organizational structure root</description>
+		<displayName>Projects</displayName>
+		<orgType>project</orgType>
+	</org>
+
+	<org oid="00000000-8888-6666-0000-200000000001">
+		<name>P0001</name>
+		<parentOrgRef oid="00000000-8888-6666-0000-200000000000" type="c:OrgType"/>
+		<assignment id="1">
+			<targetRef oid="00000000-8888-6666-0000-200000000000" type="c:OrgType"/>
+		</assignment>
+		<displayName>Save Elaine</displayName>
+		<identifier>0001</identifier>
+		<orgType>project</orgType>
+	</org>
+
+	<org oid="00000000-8888-6666-0000-200000000002">
+		<name>P0002</name>
+		<parentOrgRef oid="00000000-8888-6666-0000-200000000000" type="c:OrgType"/>
+		<assignment id="1">
+			<targetRef oid="00000000-8888-6666-0000-200000000000" type="c:OrgType"/>
+		</assignment>
+		<displayName>Kidnap and marry Elaine</displayName>
+		<identifier>0002</identifier>
+		<orgType>project</orgType>
+	</org>
+
+</objects>
\ No newline at end of file
diff --git a/testing/story/src/test/resources/strings/orgs/1-teams.xml b/testing/story/src/test/resources/strings/orgs/1-teams.xml
new file mode 100644
index 00000000000..ba8a4c831e5
--- /dev/null
+++ b/testing/story/src/test/resources/strings/orgs/1-teams.xml
@@ -0,0 +1,21 @@
+<?xml version="1.0"?>
+<!--
+  ~ Copyright (c) 2010-2017 Evolveum
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~     http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<org oid="b7cbed1f-5e73-4455-b88a-b5b3ac2a0f54"
+	 xmlns="http://midpoint.evolveum.com/xml/ns/public/common/common-3">
+	<name>Teams</name>
+</org>
\ No newline at end of file
diff --git a/testing/story/src/test/resources/strings/orgs/security-approvers.xml b/testing/story/src/test/resources/strings/orgs/security-approvers.xml
new file mode 100644
index 00000000000..dac87b80a50
--- /dev/null
+++ b/testing/story/src/test/resources/strings/orgs/security-approvers.xml
@@ -0,0 +1,25 @@
+<?xml version="1.0"?>
+<!--
+  ~ Copyright (c) 2010-2017 Evolveum
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~     http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<org oid="a14afc10-e4a2-48a4-abfd-e8a2399f98d3"
+	 xmlns="http://midpoint.evolveum.com/xml/ns/public/common/common-3">
+	<name>Security Approvers</name>
+	<parentOrgRef oid="b7cbed1f-5e73-4455-b88a-b5b3ac2a0f54" type="OrgType"></parentOrgRef>
+	<assignment>
+		<targetRef oid="b7cbed1f-5e73-4455-b88a-b5b3ac2a0f54" type="OrgType"></targetRef>
+	</assignment>
+</org>
\ No newline at end of file
diff --git a/testing/story/src/test/resources/strings/orgs/sod-approvers.xml b/testing/story/src/test/resources/strings/orgs/sod-approvers.xml
new file mode 100644
index 00000000000..5f58a50988b
--- /dev/null
+++ b/testing/story/src/test/resources/strings/orgs/sod-approvers.xml
@@ -0,0 +1,25 @@
+<?xml version="1.0"?>
+<!--
+  ~ Copyright (c) 2010-2017 Evolveum
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~     http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<org oid="cb73377a-da8d-4fbe-b174-19879bae9032"
+	 xmlns="http://midpoint.evolveum.com/xml/ns/public/common/common-3">
+	<name>SoD Approvers</name>
+	<parentOrgRef oid="b7cbed1f-5e73-4455-b88a-b5b3ac2a0f54" type="OrgType"></parentOrgRef>
+	<assignment>
+		<targetRef oid="b7cbed1f-5e73-4455-b88a-b5b3ac2a0f54" type="OrgType"></targetRef>
+	</assignment>
+</org>
\ No newline at end of file
diff --git a/testing/story/src/test/resources/strings/roles/metarole-approval-line-managers.xml b/testing/story/src/test/resources/strings/roles/metarole-approval-line-managers.xml
new file mode 100644
index 00000000000..409e1035133
--- /dev/null
+++ b/testing/story/src/test/resources/strings/roles/metarole-approval-line-managers.xml
@@ -0,0 +1,46 @@
+<!--
+  ~ Copyright (c) 2010-2017 Evolveum
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~     http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<role xmlns="http://midpoint.evolveum.com/xml/ns/public/common/common-3" oid="a97f27fe-db6f-4d94-99cd-753d1cab82ca">
+	<name>metarole-approval-line-managers</name>
+	<description>Requests to assign role holding this metarole will be approved by the line manager(s)</description>
+	<displayName>Metarole: approval by the line manager(s)</displayName>
+	<inducement>
+		<policyRule>
+			<policyConstraints>
+				<assignment/>
+			</policyConstraints>
+			<policyActions>
+				<approval>
+					<compositionStrategy>
+						<order>10</order>
+					</compositionStrategy>
+					<approvalSchema>
+						<level>
+							<approverExpression>
+								<script>
+									<code>midpoint.getManagersOidsExceptUser(object)</code>
+								</script>
+							</approverExpression>
+							<evaluationStrategy>allMustApprove</evaluationStrategy>
+							<outcomeIfNoApprovers>reject</outcomeIfNoApprovers>
+						</level>
+					</approvalSchema>
+				</approval>
+			</policyActions>
+		</policyRule>
+	</inducement>
+</role>
\ No newline at end of file
diff --git a/testing/story/src/test/resources/strings/roles/metarole-approval-role-approvers-all.xml b/testing/story/src/test/resources/strings/roles/metarole-approval-role-approvers-all.xml
new file mode 100644
index 00000000000..09a28bc69f7
--- /dev/null
+++ b/testing/story/src/test/resources/strings/roles/metarole-approval-role-approvers-all.xml
@@ -0,0 +1,42 @@
+<!--
+  ~ Copyright (c) 2010-2017 Evolveum
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~     http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<role xmlns="http://midpoint.evolveum.com/xml/ns/public/common/common-3" oid="2dadd243-687d-4b4c-80cd-09ddfe4cbf59">
+	<name>metarole-approval-role-approvers-all</name>
+	<description>Requests to assign role holding this metarole will be approved by the role approver(s) using "all must approve" method</description>
+	<displayName>Metarole: approval by the role approver(s) - all must approve</displayName>
+	<inducement>
+		<policyRule>
+			<policyConstraints>
+				<assignment/>
+			</policyConstraints>
+			<policyActions>
+				<approval>
+					<compositionStrategy>
+						<order>40</order>
+					</compositionStrategy>
+					<approvalSchema>
+						<level>
+							<approverRelation>approver</approverRelation>
+							<evaluationStrategy>allMustApprove</evaluationStrategy>
+							<outcomeIfNoApprovers>reject</outcomeIfNoApprovers>
+						</level>
+					</approvalSchema>
+				</approval>
+			</policyActions>
+		</policyRule>
+	</inducement>
+</role>
\ No newline at end of file
diff --git a/testing/story/src/test/resources/strings/roles/metarole-approval-role-approvers-first.xml b/testing/story/src/test/resources/strings/roles/metarole-approval-role-approvers-first.xml
new file mode 100644
index 00000000000..bd4add71149
--- /dev/null
+++ b/testing/story/src/test/resources/strings/roles/metarole-approval-role-approvers-first.xml
@@ -0,0 +1,42 @@
+<!--
+  ~ Copyright (c) 2010-2016 Evolveum
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~     http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+  
+<role xmlns="http://midpoint.evolveum.com/xml/ns/public/common/common-3" oid="e3c28c94-798a-4f93-85f8-de7cbe37315b">
+	<name>metarole-approval-role-approvers-first</name>
+	<description>Requests to assign role holding this metarole will be approved by the role approver(s) using "first decides" method</description>
+	<displayName>Metarole: approval by the role approver(s) - first decides</displayName>
+	<inducement>
+		<policyRule>
+			<policyConstraints>
+				<assignment />
+			</policyConstraints>
+			<policyActions>
+				<approval>
+					<compositionStrategy>
+						<order>40</order>
+					</compositionStrategy>
+					<approvalSchema>
+						<level>
+							<approverRelation>approver</approverRelation>
+							<evaluationStrategy>firstDecides</evaluationStrategy>
+							<outcomeIfNoApprovers>reject</outcomeIfNoApprovers>
+						</level>
+					</approvalSchema>
+				</approval>
+			</policyActions>
+		</policyRule>
+	</inducement>
+</role>
\ No newline at end of file
diff --git a/testing/story/src/test/resources/strings/roles/metarole-approval-security.xml b/testing/story/src/test/resources/strings/roles/metarole-approval-security.xml
new file mode 100644
index 00000000000..1c1afdedb1a
--- /dev/null
+++ b/testing/story/src/test/resources/strings/roles/metarole-approval-security.xml
@@ -0,0 +1,52 @@
+<!--
+  ~ Copyright (c) 2010-2017 Evolveum
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~     http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<role oid="9c0c224f-f279-44b5-b906-8e8418a651a2"
+	  xmlns="http://midpoint.evolveum.com/xml/ns/public/common/common-3"
+	  xmlns:q="http://prism.evolveum.com/xml/ns/public/query-3">
+	<name>metarole-approval-security</name>
+	<description>Requests to assign role holding this metarole will be approved by the security officer(s)</description>
+	<displayName>Metarole: approval by the security people</displayName>
+	<inducement>
+		<policyRule>
+			<policyConstraints>
+				<assignment/>
+			</policyConstraints>
+			<policyActions>
+				<approval>
+					<compositionStrategy>
+						<order>20</order>
+					</compositionStrategy>
+					<approvalSchema>
+						<level>
+							<approverRef type="OrgType">
+								<filter>
+									<q:equal>
+										<q:path>name</q:path>
+										<q:value>Security Approvers</q:value>
+									</q:equal>
+								</filter>
+								<resolutionTime>run</resolutionTime>
+							</approverRef>
+							<evaluationStrategy>firstDecides</evaluationStrategy>
+							<outcomeIfNoApprovers>reject</outcomeIfNoApprovers>
+						</level>
+					</approvalSchema>
+				</approval>
+			</policyActions>
+		</policyRule>
+	</inducement>
+</role>
\ No newline at end of file
diff --git a/testing/story/src/test/resources/strings/roles/metarole-approval-sod.xml b/testing/story/src/test/resources/strings/roles/metarole-approval-sod.xml
new file mode 100644
index 00000000000..4fafe984b95
--- /dev/null
+++ b/testing/story/src/test/resources/strings/roles/metarole-approval-sod.xml
@@ -0,0 +1,52 @@
+<!--
+  ~ Copyright (c) 2010-2017 Evolveum
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~     http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<role oid="9c0c224f-f279-44b5-b906-8e8418a651a2"
+	  xmlns="http://midpoint.evolveum.com/xml/ns/public/common/common-3"
+	  xmlns:q="http://prism.evolveum.com/xml/ns/public/query-3">
+	<name>metarole-approval-sod</name>
+	<description>Requests to assign role holding this metarole will be approved by the SoD approvers</description>
+	<displayName>Metarole: approval by the SoD people</displayName>
+	<inducement>
+		<policyRule>
+			<policyConstraints>
+				<assignment/>
+			</policyConstraints>
+			<policyActions>
+				<approval>
+					<compositionStrategy>
+						<order>30</order>
+					</compositionStrategy>
+					<approvalSchema>
+						<level>
+							<approverRef type="OrgType">
+								<filter>
+									<q:equal>
+										<q:path>name</q:path>
+										<q:value>SoD Approvers</q:value>
+									</q:equal>
+								</filter>
+								<resolutionTime>run</resolutionTime>
+							</approverRef>
+							<evaluationStrategy>firstDecides</evaluationStrategy>
+							<outcomeIfNoApprovers>reject</outcomeIfNoApprovers>
+						</level>
+					</approvalSchema>
+				</approval>
+			</policyActions>
+		</policyRule>
+	</inducement>
+</role>
\ No newline at end of file
diff --git a/testing/story/src/test/resources/strings/roles/test-1.xml b/testing/story/src/test/resources/strings/roles/test-1.xml
new file mode 100644
index 00000000000..612524950d1
--- /dev/null
+++ b/testing/story/src/test/resources/strings/roles/test-1.xml
@@ -0,0 +1,53 @@
+<!--
+  ~ Copyright (c) 2010-2017 Evolveum
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~     http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<role oid="0daa49bc-6f5b-4746-8461-2e1a633070e3"
+	  xmlns="http://midpoint.evolveum.com/xml/ns/public/common/common-3"
+	  xmlns:c="http://midpoint.evolveum.com/xml/ns/public/common/common-3"
+	  xmlns:q="http://prism.evolveum.com/xml/ns/public/query-3">
+	<name>test-1</name>
+	<c:description>Approved by managers, security and role approvers (all)</c:description>
+	<c:assignment id="1">
+		<c:targetRef type="c:RoleType">
+			<filter>
+				<q:equal>
+					<q:path>name</q:path>
+					<q:value>metarole-approval-line-managers</q:value>
+				</q:equal>
+			</filter>
+		</c:targetRef>
+	</c:assignment>
+	<c:assignment id="2">
+		<c:targetRef type="c:RoleType">
+			<filter>
+				<q:equal>
+					<q:path>name</q:path>
+					<q:value>metarole-approval-security</q:value>
+				</q:equal>
+			</filter>
+		</c:targetRef>
+	</c:assignment>
+	<c:assignment id="3">
+		<c:targetRef type="c:RoleType">
+			<filter>
+				<q:equal>
+					<q:path>name</q:path>
+					<q:value>metarole-approval-role-approvers-all</q:value>
+				</q:equal>
+			</filter>
+		</c:targetRef>
+	</c:assignment>
+</role>
\ No newline at end of file
diff --git a/testing/story/src/test/resources/strings/users/barkeeper.xml b/testing/story/src/test/resources/strings/users/barkeeper.xml
new file mode 100644
index 00000000000..222c0a7040c
--- /dev/null
+++ b/testing/story/src/test/resources/strings/users/barkeeper.xml
@@ -0,0 +1,52 @@
+<?xml version="1.0"?>
+<!--
+  ~ Copyright (c) 2010-2017 Evolveum
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~     http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<user oid="b87eb285-b4ae-43c0-9e4c-7ba651de81fa"
+	  xmlns="http://midpoint.evolveum.com/xml/ns/public/common/common-3"
+	  xmlns:c="http://midpoint.evolveum.com/xml/ns/public/common/common-3"
+	  xmlns:q="http://prism.evolveum.com/xml/ns/public/query-3">
+
+	<name>barkeeper</name>
+	<parentOrgRef oid="00000000-8888-6666-0000-100000000006" type="c:OrgType"/>
+	<assignment id="1">
+		<targetRef oid="00000000-8888-6666-0000-100000000006" type="c:OrgType"/>
+	</assignment>
+	<c:assignment id="2">
+		<c:targetRef type="c:OrgType">
+			<filter>
+				<q:equal>
+					<q:path>name</q:path>
+					<q:value>Security Approvers</q:value>
+				</q:equal>
+			</filter>
+		</c:targetRef>
+	</c:assignment>
+	<assignment id="1000">
+		<targetRef oid="00000000-0000-0000-0000-000000000008" type="RoleType"/>    <!-- End user -->
+	</assignment>
+	<assignment id="1001">
+		<targetRef oid="00000000-0000-0000-0000-00000000000a" type="RoleType"/>    <!-- Approver -->
+	</assignment>
+	<fullName>Horridly Scarred Barkeep</fullName>
+	<givenName>Barkeeper</givenName>
+	<familyName>Scumm</familyName>
+	<credentials>
+		<password>
+			<value>a123456</value>
+		</password>
+	</credentials>
+</user>
diff --git a/testing/story/src/test/resources/strings/users/bob.xml b/testing/story/src/test/resources/strings/users/bob.xml
new file mode 100644
index 00000000000..3fdf210beb3
--- /dev/null
+++ b/testing/story/src/test/resources/strings/users/bob.xml
@@ -0,0 +1,28 @@
+<?xml version="1.0"?>
+<!--
+  ~ Copyright (c) 2010-2017 Evolveum
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~     http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<user oid="469fd663-4492-4c24-8ce3-3907df7ac7ec"
+	  xmlns="http://midpoint.evolveum.com/xml/ns/public/common/common-3"
+	  xmlns:c="http://midpoint.evolveum.com/xml/ns/public/common/common-3">
+	<name>bob</name>
+	<parentOrgRef oid="00000000-8888-6666-0000-200000000002" type="c:OrgType"/>
+	<assignment>
+		<targetRef oid="00000000-8888-6666-0000-200000000002" type="c:OrgType"/>
+	</assignment>
+	<fullName>Ghost Pirate Bob</fullName>
+	<givenName>Bob</givenName>
+</user>
diff --git a/testing/story/src/test/resources/strings/users/carla.xml b/testing/story/src/test/resources/strings/users/carla.xml
new file mode 100644
index 00000000000..68cf1a1c4b2
--- /dev/null
+++ b/testing/story/src/test/resources/strings/users/carla.xml
@@ -0,0 +1,36 @@
+<?xml version="1.0"?>
+<!--
+  ~ Copyright (c) 2010-2017 Evolveum
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~     http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<user oid="f9be8006-fd58-43f9-99ff-311935d9d3d3"
+	  xmlns="http://midpoint.evolveum.com/xml/ns/public/common/common-3"
+	  xmlns:c="http://midpoint.evolveum.com/xml/ns/public/common/common-3">
+	<name>carla</name>
+	<parentOrgRef oid="00000000-8888-6666-0000-100000000002" type="c:OrgType"/>
+	<parentOrgRef oid="00000000-8888-6666-0000-200000000001" type="c:OrgType"/>
+	<parentOrgRef oid="00000000-8888-6666-0000-100000000004" type="c:OrgType"/>
+	<assignment>
+		<targetRef oid="00000000-8888-6666-0000-100000000002" type="c:OrgType"/>
+	</assignment>
+	<assignment>
+		<targetRef oid="00000000-8888-6666-0000-200000000001" type="c:OrgType"/>
+	</assignment>
+	<assignment>
+		<targetRef oid="00000000-8888-6666-0000-100000000004" type="c:OrgType"/>
+	</assignment>
+	<fullName>Carla the Swordmaster</fullName>
+	<givenName>Carla</givenName>
+</user>
diff --git a/testing/story/src/test/resources/strings/users/cheese.xml b/testing/story/src/test/resources/strings/users/cheese.xml
new file mode 100644
index 00000000000..9c54d817152
--- /dev/null
+++ b/testing/story/src/test/resources/strings/users/cheese.xml
@@ -0,0 +1,58 @@
+<?xml version="1.0"?>
+<!--
+  ~ Copyright (c) 2010-2017 Evolveum
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~     http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<user oid="b2a3f4ad-ad7b-4691-83d9-34d5ebb50a04"
+	  xmlns="http://midpoint.evolveum.com/xml/ns/public/common/common-3"
+	  xmlns:c="http://midpoint.evolveum.com/xml/ns/public/common/common-3"
+	  xmlns:q="http://prism.evolveum.com/xml/ns/public/query-3"
+	  xmlns:org="http://midpoint.evolveum.com/xml/ns/public/common/org-3">
+
+	<name>cheese</name>
+	<description>The owner of Scumm Bar</description>
+	<parentOrgRef oid="00000000-8888-6666-0000-100000000006" type="c:OrgType"/>
+	<parentOrgRef oid="00000000-8888-6666-0000-100000000006" type="c:OrgType" relation="org:manager"/>
+	<assignment id="1">
+		<targetRef oid="00000000-8888-6666-0000-100000000006" type="c:OrgType"/>
+	</assignment>
+	<assignment id="2">
+		<targetRef oid="00000000-8888-6666-0000-100000000006" type="c:OrgType" relation="org:manager"/>
+	</assignment>
+	<assignment id="3">
+		<targetRef type="RoleType" relation="org:approver">
+			<filter>
+				<q:equal>
+					<q:path>name</q:path>
+					<q:value>test-1</q:value>
+				</q:equal>
+			</filter>
+		</targetRef>
+	</assignment>
+	<assignment id="1000">
+		<targetRef oid="00000000-0000-0000-0000-000000000008" type="RoleType"/>    <!-- End user -->
+	</assignment>
+	<assignment id="1001">
+		<targetRef oid="00000000-0000-0000-0000-00000000000a" type="RoleType"/>    <!-- Approver -->
+	</assignment>
+	<fullName>Ignatius Cheese</fullName>
+	<givenName>Ignatius</givenName>
+	<familyName>Cheese</familyName>
+	<credentials>
+		<password>
+			<value>a123456</value>
+		</password>
+	</credentials>
+</user>
diff --git a/testing/story/src/test/resources/strings/users/chef.xml b/testing/story/src/test/resources/strings/users/chef.xml
new file mode 100644
index 00000000000..540d26269f0
--- /dev/null
+++ b/testing/story/src/test/resources/strings/users/chef.xml
@@ -0,0 +1,53 @@
+<?xml version="1.0"?>
+<!--
+  ~ Copyright (c) 2010-2017 Evolveum
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~     http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<user oid="60dd9e6b-7403-4075-bcfa-d4566a552d41"
+	  xmlns="http://midpoint.evolveum.com/xml/ns/public/common/common-3"
+	  xmlns:c="http://midpoint.evolveum.com/xml/ns/public/common/common-3"
+	  xmlns:q="http://prism.evolveum.com/xml/ns/public/query-3"
+	  xmlns:org="http://midpoint.evolveum.com/xml/ns/public/common/org-3">
+	<name>chef</name>
+	<parentOrgRef oid="00000000-8888-6666-0000-100000000006" type="c:OrgType"/>
+	<assignment id="1">
+		<targetRef oid="00000000-8888-6666-0000-100000000006" type="c:OrgType"/>
+	</assignment>
+	<assignment id="2">
+		<targetRef type="RoleType" relation="org:approver">
+			<filter>
+				<q:equal>
+					<q:path>name</q:path>
+					<q:value>test-1</q:value>
+				</q:equal>
+			</filter>
+		</targetRef>
+	</assignment>
+	<assignment id="1000">
+		<targetRef oid="00000000-0000-0000-0000-000000000008" type="RoleType"/>    <!-- End user -->
+	</assignment>
+	<assignment id="1001">
+		<targetRef oid="00000000-0000-0000-0000-00000000000a" type="RoleType"/>    <!-- Approver -->
+	</assignment>
+	<fullName>Scumm Bar Chef</fullName>
+	<givenName>Chef</givenName>
+	<familyName>Scumm</familyName>
+	<credentials>
+		<password>
+			<value>a123456</value>
+		</password>
+	</credentials>
+</user>
+	
diff --git a/testing/story/src/test/resources/strings/users/elaine.xml b/testing/story/src/test/resources/strings/users/elaine.xml
new file mode 100644
index 00000000000..57ba95be8e3
--- /dev/null
+++ b/testing/story/src/test/resources/strings/users/elaine.xml
@@ -0,0 +1,66 @@
+<!--
+  ~ Copyright (c) 2010-2017 Evolveum
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~     http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<user oid="771d00e6-792a-4296-8b4e-c4f59f712e0f"
+	  xmlns="http://midpoint.evolveum.com/xml/ns/public/common/common-3"
+	  xmlns:c="http://midpoint.evolveum.com/xml/ns/public/common/common-3"
+	  xmlns:q="http://prism.evolveum.com/xml/ns/public/query-3"
+	  xmlns:org="http://midpoint.evolveum.com/xml/ns/public/common/org-3">
+	<name>elaine</name>
+	<parentOrgRef oid="00000000-8888-6666-0000-100000000001" type="c:OrgType"/> <!-- No "relation" in the ref means "member" -->
+	<parentOrgRef oid="00000000-8888-6666-0000-100000000001" type="c:OrgType" relation="org:manager"/>
+	<assignment id="1">
+		<targetRef oid="00000000-8888-6666-0000-100000000001" type="c:OrgType"/>
+	</assignment>
+	<assignment id="2">
+		<targetRef oid="00000000-8888-6666-0000-100000000001" type="c:OrgType" relation="org:manager"/>
+	</assignment>
+	<c:assignment id="3">
+		<c:targetRef type="c:OrgType">
+			<filter>
+				<q:equal>
+					<q:path>name</q:path>
+					<q:value>Security Approvers</q:value>
+				</q:equal>
+			</filter>
+		</c:targetRef>
+	</c:assignment>
+	<c:assignment id="4">
+		<c:targetRef type="c:OrgType">
+			<filter>
+				<q:equal>
+					<q:path>name</q:path>
+					<q:value>SoD Approvers</q:value>
+				</q:equal>
+			</filter>
+		</c:targetRef>
+	</c:assignment>
+	<assignment id="1000">
+		<targetRef oid="00000000-0000-0000-0000-000000000008" type="RoleType"/>    <!-- End user -->
+	</assignment>
+	<assignment id="1001">
+		<targetRef oid="00000000-0000-0000-0000-00000000000a" type="RoleType"/>    <!-- Approver -->
+	</assignment>
+	<fullName>Elaine Marley</fullName>
+	<givenName>Elaine</givenName>
+	<familyName>Marley</familyName>
+	<title>Governor</title>
+	<credentials>
+		<password>
+			<value>a123456</value>
+		</password>
+	</credentials>
+</user>
\ No newline at end of file
diff --git a/testing/story/src/test/resources/strings/users/guybrush.xml b/testing/story/src/test/resources/strings/users/guybrush.xml
new file mode 100644
index 00000000000..338846e5604
--- /dev/null
+++ b/testing/story/src/test/resources/strings/users/guybrush.xml
@@ -0,0 +1,35 @@
+<?xml version="1.0"?>
+<!--
+  ~ Copyright (c) 2010-2017 Evolveum
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~     http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<user oid="47f403ae-5a22-4226-aab9-cd321a62d6d3"
+	  xmlns="http://midpoint.evolveum.com/xml/ns/public/common/common-3"
+	  xmlns:c="http://midpoint.evolveum.com/xml/ns/public/common/common-3"
+	  xmlns:org="http://midpoint.evolveum.com/xml/ns/public/common/org-3">
+	<name>guybrush</name>
+	<!-- Member of Scumm Bar but manager of Ministry of Rum (where he is NOT member) -->
+	<parentOrgRef oid="00000000-8888-6666-0000-100000000006" type="c:OrgType"/>
+	<parentOrgRef oid="00000000-8888-6666-0000-100000000004" type="c:OrgType" relation="org:manager"/>
+	<assignment>
+		<targetRef oid="00000000-8888-6666-0000-100000000006" type="c:OrgType"/>
+	</assignment>
+	<assignment>
+		<targetRef oid="00000000-8888-6666-0000-100000000004" type="c:OrgType" relation="org:manager"/>
+	</assignment>
+	<fullName>Guybrush Threepwood</fullName>
+	<givenName>Guybrush</givenName>
+	<familyName>Threepwood</familyName>
+</user>
diff --git a/testing/story/src/test/resources/strings/users/lechuck.xml b/testing/story/src/test/resources/strings/users/lechuck.xml
new file mode 100644
index 00000000000..4a87d518177
--- /dev/null
+++ b/testing/story/src/test/resources/strings/users/lechuck.xml
@@ -0,0 +1,30 @@
+<?xml version="1.0"?>
+<!--
+  ~ Copyright (c) 2010-2017 Evolveum
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~     http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<user oid="058cf8d5-01ec-4818-87cc-6477b1a6505f"
+	  xmlns="http://midpoint.evolveum.com/xml/ns/public/common/common-3"
+	  xmlns:c="http://midpoint.evolveum.com/xml/ns/public/common/common-3"
+	  xmlns:org="http://midpoint.evolveum.com/xml/ns/public/common/org-3">
+	<name>lechuck</name>
+	<!-- LeChuck just manages, does not belong to anywhere -->
+	<parentOrgRef oid="00000000-8888-6666-0000-200000000002" type="c:OrgType" relation="org:manager"/>
+	<assignment>
+		<targetRef oid="00000000-8888-6666-0000-200000000002" type="c:OrgType" relation="org:manager"/>
+	</assignment>
+	<fullName>Captain LeChuck</fullName>
+	<familyName>LeChuck</familyName>
+</user>