Initial objects for the release

Evolveum · Sep 5, 2016 · 1961d15 · 1961d15
1 parent ca60b25
commit 1961d15
Showing 1 changed file with 5 additions and 4 deletions.
diff --git a/config/initial-objects/040-role-enduser.xml b/config/initial-objects/040-role-enduser.xml
@@ -122,20 +122,21 @@
     	<item>roleMembershipRef</item>
     </authorization>
     <authorization>
-    	<name>self-shadow-execution-modify</name>
+    	<name>self-shadow-execution-add-modify-delete</name>
     	<description>
-    		Authorization that allows to self-modification of some properties on user's accounts, but only in execution phase. 
-    		The limitation real limitation of these operations is done in the request phase.
+    		Authorization that allows to self-modification of user's accounts, but only in execution phase.
+    		The real limitation of these operations is done in the request phase.
     	</description>
+		<action>http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#add</action>
     	<action>http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#modify</action>
+    	<action>http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#delete</action>
     	<phase>execution</phase>
     	<object>
     		<type>ShadowType</type>
     		<owner>
     			<special>self</special>
     		</owner>
     	</object>
-    	<item>credentials</item>
     </authorization>
     <authorization>
     	<name>assignment-target-read</name>