Merge remote-tracking branch 'origin/master' into feature/role-mining

Evolveum · Mar 15, 2024 · dd7b339 · dd7b339
2 parents 65be63e + 8201921
commit dd7b339
Show file tree

Hide file tree

Showing 434 changed files with 3,698 additions and 1,188 deletions.
diff --git a/config/initial-objects/role/040-role-enduser.xml b/config/initial-objects/role/040-role-enduser.xml
@@ -243,6 +243,9 @@
         </object>
     </authorization>
     <adminGuiConfiguration>
+        <feedbackMessagesHook>
+            <stackTraceVisibility>hidden</stackTraceVisibility>
+        </feedbackMessagesHook>
         <homePage id="34">
             <type>UserType</type>
             <widget id="35">

diff --git a/config/initial-objects/role/042-role-reviewer.xml b/config/initial-objects/role/042-role-reviewer.xml
@@ -95,4 +95,16 @@
         <item>riskLevel</item>
         <item>serviceType</item>
     </authorization>
+    <authorization>
+        <name>certification-campaign-read</name>
+        <description>
+            Allow to read stageNumber property of certification campaign.
+        </description>
+        <action>http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#read</action>
+        <object>
+            <type>AccessCertificationCampaignType</type>
+        </object>
+        <item>name</item>
+        <item>stageNumber</item>
+    </authorization>
 </role>
diff --git a/config/initial-objects/user/050-user-administrator.xml b/config/initial-objects/user/050-user-administrator.xml
@@ -25,11 +25,4 @@
     <activation>
         <administrativeStatus>enabled</administrativeStatus>
     </activation>
-    <credentials xmlns="http://midpoint.evolveum.com/xml/ns/public/common/common-3">
-        <password>
-            <value>
-                 <t:clearValue>5ecr3t</t:clearValue>
-             </value>
-        </password>
-    </credentials>
 </user>
diff --git a/config/initial-objects/value-policy/010-value-policy.xml b/config/initial-objects/value-policy/010-value-policy.xml
@@ -9,37 +9,62 @@
         xmlns="http://midpoint.evolveum.com/xml/ns/public/common/common-3"
         xmlns:t="http://prism.evolveum.com/xml/ns/public/types-3"
         version="0">
-    <name>
-        <t:orig>Default Password Policy</t:orig>
-        <t:norm>default password policy</t:norm>
-    </name>
+    <name>Default Password Policy</name>
     <description>Default password policy</description>
     <stringPolicy>
         <description>Testing string policy</description>
         <limitations>
-            <minLength>5</minLength>
-            <!--             <maxLength>8</maxLength> -->
+            <minLength>8</minLength>
+            <maxLength>14</maxLength>
             <minUniqueChars>3</minUniqueChars>
             <checkAgainstDictionary>true</checkAgainstDictionary>
-            <checkPattern />
-            <!--             <limit> -->
-            <!--                 <description>Alphas</description> -->
-            <!--                 <minOccurs>1</minOccurs> -->
-            <!--                 <maxOccurs>5</maxOccurs> -->
-            <!--                 <mustBeFirst>false</mustBeFirst> -->
-            <!--                 <characterClass> -->
-            <!--                     <value>abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ</value> -->
-            <!--                 </characterClass> -->
-            <!--             </limit> -->
-            <!--             <limit> -->
-            <!--                 <description>Numbers</description> -->
-            <!--                 <minOccurs>1</minOccurs> -->
-            <!--                 <maxOccurs>5</maxOccurs> -->
-            <!--                 <mustBeFirst>false</mustBeFirst> -->
-            <!--                 <characterClass> -->
-            <!--                     <value>1234567890</value> -->
-            <!--                 </characterClass> -->
-            <!--             </limit> -->
+            <checkPattern/>
+            <checkExpression>
+                <expression>
+                    <script>
+                        <code>
+                            if (object instanceof com.evolveum.midpoint.xml.ns._public.common.common_3.UserType) {
+                            return !basic.containsIgnoreCase(input, object.getName()) &amp;&amp; !basic.containsIgnoreCase(input, object.getFamilyName()) &amp;&amp; !basic.containsIgnoreCase(input, object.getGivenName()) &amp;&amp; !basic.containsIgnoreCase(input, object.getAdditionalName())
+                            } else {
+                            return true
+                            }
+                        </code>
+                    </script>
+                </expression>
+                <failureMessage>must not contain username, family name and given name and additional names</failureMessage>
+            </checkExpression>
+            <limit>
+                <description>Lowercase characters</description>
+                <minOccurs>1</minOccurs>
+                <mustBeFirst>false</mustBeFirst>
+                <characterClass>
+                    <value>abcdefghijklmnopqrstuvwxyz</value>
+                </characterClass>
+            </limit>
+            <limit>
+                <description>Uppercase characters</description>
+                <minOccurs>1</minOccurs>
+                <mustBeFirst>false</mustBeFirst>
+                <characterClass>
+                    <value>ABCDEFGHIJKLMNOPQRSTUVWXYZ</value>
+                </characterClass>
+            </limit>
+            <limit>
+                <description>Numeric characters</description>
+                <minOccurs>1</minOccurs>
+                <mustBeFirst>false</mustBeFirst>
+                <characterClass>
+                    <value>1234567890</value>
+                </characterClass>
+            </limit>
+            <limit>
+                <description>Special characters</description>
+                <minOccurs>0</minOccurs>
+                <mustBeFirst>false</mustBeFirst>
+                <characterClass>
+                    <value> !"#$%&amp;'()*+,-.:;&lt;&gt;?@[]^_`{|}~</value>
+                </characterClass>
+            </limit>
         </limitations>
     </stringPolicy>
 </valuePolicy>
diff --git a/docs/admin-gui/collections-views/configuration/index.adoc b/docs/admin-gui/collections-views/configuration/index.adoc
@@ -1,3 +1,7 @@
+---
+midpoint-feature: object-collection-and-view
+doc-type: config
+---
 = Object Collections and Views Configuration
 :page-nav-title: Configuration
 :page-display-order: 50
@@ -516,4 +520,4 @@ Therefore, *link:https://evolveum.com/services/professional-support/[midPoint Pl
 
 * xref:/midpoint/features/planned/compliance/[Compliance]
 
-* xref:/midpoint/reference/admin-gui/dashboards/[Customizable Dashboards]
+* xref:/midpoint/reference/admin-gui/dashboards/[Customizable Dashboards]
diff --git a/docs/admin-gui/collections-views/index.adoc b/docs/admin-gui/collections-views/index.adoc
@@ -1,3 +1,7 @@
+---
+midpoint-feature: object-collection-and-view
+doc-type: intro
+---
 = Object Collections and Views
 :page-wiki-name: Object Collections and Views
 :page-wiki-id: 24676784
@@ -8,8 +12,6 @@
 :page-since: "4.0"
 :page-since-improved: [ "4.2", "4.3" ]
 :page-toc: top
-:page-midpoint-feature: true
-:page-alias: { "parent" : "/midpoint/features/current/" }
 :page-upkeep-status: orange
 :page-upkeep-note: Document recent improvements (4.2, 4.3)
 
@@ -64,4 +66,4 @@ See xref:/midpoint/features/planned/object-collections-and-views/[Object Collect
 
 * xref:/midpoint/features/planned/compliance/[Compliance]
 
-* xref:/midpoint/reference/admin-gui/dashboards/[Customizable Dashboards]
+* xref:/midpoint/reference/admin-gui/dashboards/[Customizable Dashboards]
diff --git a/docs/admin-gui/custom-forms/index.adoc b/docs/admin-gui/custom-forms/index.adoc
@@ -6,8 +6,6 @@
 :page-wiki-metadata-modify-user: katkav
 :page-wiki-metadata-modify-date: 2017-01-30T11:42:47.269+01:00
 :page-since: "3.6"
-:page-midpoint-feature: true
-:page-alias: { "parent" : "/midpoint/features/current/" }
 :page-toc: top
 :page-upkeep-status: yellow
 

diff --git a/docs/admin-gui/dashboards/configuration/index.adoc b/docs/admin-gui/dashboards/configuration/index.adoc
@@ -1,3 +1,7 @@
+---
+midpoint-feature: dashboard
+doc-type: config
+---
 = Dashboard Configuration
 :page-nav-title: Configuration
 :page-wiki-name: Dashboard configuration

diff --git a/docs/admin-gui/dashboards/index.adoc b/docs/admin-gui/dashboards/index.adoc
@@ -1,3 +1,7 @@
+---
+midpoint-feature: dashboard
+doc-type: intro
+---
 = Customizable Dashboards
 :page-wiki-name: Customizable Dashboards
 :page-wiki-id: 27361691
@@ -6,8 +10,6 @@
 :page-wiki-metadata-modify-user: semancik
 :page-wiki-metadata-modify-date: 2019-02-01T13:16:14.087+01:00
 :page-nav-title: Dashboards
-:page-midpoint-feature: true
-:page-alias: { "parent" : "/midpoint/features/current/" }
 :page-since: "4.0"
 :page-upkeep-status: orange
 :page-upkeep-note: This was a "planned feature" test. I have quicly edited it to be a in present tense. But perhaps more edits are needed.
@@ -78,4 +80,4 @@ See xref:configuration/[] page for more details.
 
 * xref:/midpoint/features/planned/compliance/[Compliance]
 
-* xref:/midpoint/reference/schema/archetypes/[Archetypes]
+* xref:/midpoint/reference/schema/archetypes/[Archetypes]
diff --git a/docs/admin-gui/delta-visualization.adoc b/docs/admin-gui/delta-visualization.adoc
@@ -1,7 +1,6 @@
 = Delta visualization
 :page-toc: top
 :page-since: "4.7"
-:page-midpoint-feature: true
 :page-upkeep-status: green
 
 == Introduction
@@ -34,4 +33,4 @@ image::preview-new-simple.png[New simple view,100%]
 Advanced view will still show all information related to object delta as it used to.
 
 .New advanced view
-image::preview-new-advanced.png[New advanced view,100%]
+image::preview-new-advanced.png[New advanced view,100%]
diff --git a/docs/admin-gui/localization.adoc b/docs/admin-gui/localization.adoc
@@ -1,12 +1,14 @@
+---
+midpoint-feature: localization
+doc-type: intro
+---
 = Localization
 :page-wiki-name: Localization
 :page-wiki-id: 30245445
 :page-wiki-metadata-create-user: semancik
 :page-wiki-metadata-create-date: 2019-04-24T08:13:11.429+02:00
 :page-wiki-metadata-modify-user: petr.gasparik
 :page-wiki-metadata-modify-date: 2021-01-27T10:31:25.054+01:00
-:page-midpoint-feature: true
-:page-alias: { "parent" : "/midpoint/features/current/" }
 :page-upkeep-status: yellow
 
 MidPoint was born in Europe, therefore it is quite natural that it had support for multiple languages from its very beginning.

diff --git a/docs/admin-gui/sections-object-details/index.adoc b/docs/admin-gui/sections-object-details/index.adoc
@@ -6,8 +6,6 @@
 :page-wiki-metadata-modify-user: katkav
 :page-wiki-metadata-modify-date: 2019-09-25T14:15:16.269+02:00
 :page-since: "4.0"
-:page-midpoint-feature: true
-:page-alias: { "parent" : "/midpoint/features/current/" }
 :page-upkeep-status: yellow
 
 == Introduction
@@ -93,4 +91,4 @@ The result of the configuration above is, that on the details page, there will b
 
 The screenshot below shows the impact in the GUI.
 
-image::screenshot-sections.png[]
+image::screenshot-sections.png[]
diff --git a/docs/admin-gui/simulations.adoc b/docs/admin-gui/simulations.adoc
@@ -1,7 +1,10 @@
+---
+midpoint-feature: simulation
+doc-type: intro
+---
 = Simulations
 :page-toc: top
 :page-since: "4.7"
-:page-midpoint-feature: true
 :page-upkeep-status: green
 
 == Introduction

diff --git a/docs/cases/approval/examples/index.adoc b/docs/cases/approval/examples/index.adoc
@@ -1,3 +1,7 @@
+---
+midpoint-feature: approval-process
+doc-type: example
+---
 = Approval examples
 :page-wiki-name: Approval examples
 :page-wiki-id: 24085020
@@ -15,4 +19,4 @@ Some features (e.g. run-time resolvable approver references and `outcomeIfNoAppr
 
 ++++
 {% children %}
-++++
+++++
diff --git a/docs/cases/approval/index.adoc b/docs/cases/approval/index.adoc
@@ -1,12 +1,14 @@
+---
+midpoint-feature: approval-process
+doc-type: config
+---
 = Approval
 :page-wiki-name: Approval
 :page-wiki-id: 24084555
 :page-wiki-metadata-create-user: semancik
 :page-wiki-metadata-create-date: 2016-11-28T14:20:31.930+01:00
 :page-wiki-metadata-modify-user: vera
 :page-wiki-metadata-modify-date: 2020-03-31T15:04:51.194+02:00
-:page-midpoint-feature: true
-:page-alias: { "parent" : "/midpoint/features/current/" }
 :page-upkeep-status: red
 :page-upkeep-note: Old approvals vs new approvals
 

diff --git a/docs/cases/approval/policy-based-approvals.adoc b/docs/cases/approval/policy-based-approvals.adoc
@@ -1,12 +1,14 @@
+---
+midpoint-feature: approval-process
+doc-type: intro
+---
 = Policy-based approvals
 :page-wiki-name: Policy-based approvals
 :page-wiki-id: 36569442
 :page-wiki-metadata-create-user: semancik
 :page-wiki-metadata-create-date: 2019-09-12T10:07:40.804+02:00
 :page-wiki-metadata-modify-user: mederly
 :page-wiki-metadata-modify-date: 2019-09-12T11:06:20.322+02:00
-:page-midpoint-feature: true
-:page-alias: { "parent" : "/midpoint/features/current/" }
 :page-upkeep-status: yellow
 
 MidPoint is identity management and governance system, therefore it is quite natural that it implements an xref:/midpoint/reference/cases/approval/[approval] mechanism.

diff --git a/docs/concepts/clockwork/scripting-hooks.adoc b/docs/concepts/clockwork/scripting-hooks.adoc
@@ -1,3 +1,7 @@
+---
+midpoint-feature: scripting-hook
+doc-type: config
+---
 = Scripting Hooks
 :page-wiki-name: Scripting Hooks
 :page-wiki-id: 13074820
@@ -107,4 +111,4 @@ Following scripting hook removes all assignments from disabled users. Please not
         </code>
     </script>
 </hook>
-----
+----
diff --git a/docs/concepts/iteration/index.adoc b/docs/concepts/iteration/index.adoc
@@ -1,12 +1,14 @@
+---
+midpoint-feature: iteration
+doc-type: intro
+---
 = Iteration
 :page-wiki-name: Iteration
 :page-wiki-id: 22741768
 :page-wiki-metadata-create-user: semancik
 :page-wiki-metadata-create-date: 2016-06-28T12:54:10.473+02:00
 :page-wiki-metadata-modify-user: semancik
 :page-wiki-metadata-modify-date: 2016-06-28T12:54:10.473+02:00
-:page-midpoint-feature: true
-:page-alias: { "parent" : "/midpoint/features/current/" }
 :page-upkeep-status: green
 
 Iteration is mechanism how to determine a unique value by several attempts.
@@ -21,4 +23,4 @@ Iteration mechanism can be easily enabled and customized in xref:/midpoint/refer
 
 * xref:/midpoint/reference/concepts/iteration/unique-account-username/[Unique Account Username HOWTO]
 
-* xref:/midpoint/reference/concepts/iteration/unique-property-value/[Unique property value HOWTO]
+* xref:/midpoint/reference/concepts/iteration/unique-property-value/[Unique property value HOWTO]
diff --git a/docs/concepts/mark/index.adoc b/docs/concepts/mark/index.adoc
@@ -1,8 +1,10 @@
+---
+midpoint-feature: object-mark
+doc-type: intro
+---
 = Object Marks
 :page-toc: top
 :page-since: "4.7"
-:page-midpoint-feature: true
-:page-alias: { "parent" : "/midpoint/features/current/" }
 :page-moved-from: /midpoint/reference/mark/
 :page-upkeep-status: green
 

diff --git a/docs/concepts/matching-rules.adoc b/docs/concepts/matching-rules.adoc
@@ -5,8 +5,6 @@
 :page-wiki-metadata-create-date: 2013-06-12T17:09:21.626+02:00
 :page-wiki-metadata-modify-user: martin.lizner
 :page-wiki-metadata-modify-date: 2017-01-02T13:10:02.801+01:00
-:page-midpoint-feature: true
-:page-alias: { "parent" : "/midpoint/features/current/" }
 :page-toc: top
 
 Matching rules are short expressions that can normalize and match attribute values.