Role Bindings Widgets

Definition

Two Widgets allow to edit and display Roles bound to a Super Role.

A Super Role defines a set of Roles that will be automatically granted to an Identity when an assignment of this Super Role is performed. This is described in a Role binding.

Role Bindings Edit	Role Bindings Display

Tips

To access the Role Bindings Edit Widget or Role Bindings Display Widget, you must configure the Widget on a Feature with:

Object kind = ROLE
Object type = Role Type (which is a standard Role)

Use

When the Role Bindings Edit Widget is configured in an update feature, you can add, update or delete a bound Role to a Super Role.

When the Role Bindings Display Widget is configured in a read feature, you can view a bound Role to a Super Role.

Create and update Role Bindings

You can bind a Role to a Super Role by clicking on the "Add Role" button.

You can update the bound Role to a Super Role by clicking on the "Edit" button.

On each case, a pop-up opens with a form which displays a drop-down list with available Roles.

When you choose a Role with configured dimensions, the following information is displayed:

role id
name
dimensions mapping

Dimensions mapping

This part allows to define the dimensions mapping on the Role.

When configuring a Role Binding on a Super Role, all of the dimensions must me mapped. This means the binding must configure how the value for these dimensions will be computed.

If a dimension mapping is mandatory, a red star is displayed next to it.

A dimension mapping can be configured as following:

Mapping type	Value type	Description	Examples
None	`N/A`	When no Dimension Mapping is set, then the Dimension is visible directly on the parent Role. It is considered as "exposed". Technically, it is as if the child Role or Right's Dimension were configured directly on the parent Role.
No Value	`N/A`	This type is available only if the dimension is not mandatory. The value of the dimension will never be valued or exposed.
Direct	`Dimension name`	When configured as a "direct" Dimension Mapping, the child Role's Dimension is valued using an input from one of the parent Role's Dimension. Typically used when: the dimension's name is different a dimension value may be reused in multiple child Roles The user can select the id of the dimension by using a drop-down list.
Value	`Dimension type`	The dimension value is explicitly set in the mapping. If the dimension is multivalued, it is possible to add several values. In this case, the dimension will never be displayed (on the Role Assignment widget or on the Role Dashboard) even if a tag has been defined.
Expression	`Groovy rule`	When configured as an "expression" Dimension Mapping, the value is computed with a provided groovy expression that can make use of any of the following values: one of the other Dimensions value one of the Role's Attribute value one of the Identity's Attribute value	Example to configure a concatenation of two dimensions (monovalued) : CODE `return "PRD." + DIMENSION.sourceDimensions['Profil'] +"-"+ DIMENSION.sourceDimensions.Pays` Example to configure a concatenation of two dimensions (multivalued) : CODE `def liste=[] DIMENSION.sourceDimensions.Pays.each { liste+= "PRD."+DIMENSION.sourceDimensions.Profil+"-"+it } return liste`

Delete Role Bindings

You can delete a bound Role to a Super Role by clicking on the "Delete" button.

Read Role Bindings

You can consult a bound Role to a Super Role by clicking on the "View" button.

Configuration

Properties

Property name	Type	Mandatory	Description	Edit	Display
scope	`scope`	NO	Allows to limit the search results.
search	-	YES	Same configuration as a Search Widget Type. <rowClickActions> and <allowExport> tags are not applicable for this Widget.

Example

Edit

Display

XML

<widget id="roleBindings" xsi:type="ctdbum:AttributeEditorWidgetType">
	<hidden>false</hidden>
    <config>
    	<editor>
        	<editWidget xsi:type="ctdbum:RoleBindingsEditWidgetType">
            	<hidden>false</hidden>
                <config>
                    <label></label>
                    <placeholder></placeholder>
                    <required>false</required>
                    <scope type="EXPRESSION" objectKind="ROLE">
                    	<searchExpression/>
                        <objectTypes>
                        	<objectType>role_type_1</objectType>
                        </objectTypes>
                    </scope>
                    <search>
                    	<actions/>
                        <allowExport>false</allowExport>
                        <columns>
                        	<column>
                            	<attribute>true</attribute>
                                <dataKey>id</dataKey>
                                <dataType>string</dataType>
                                <dateFormat>DAY_MONTH_YEAR_LONG</dateFormat>
                                <ellipsis>false</ellipsis>
                                <hidden>false</hidden>
                                <sortAs>ALPHA</sortAs>
                                <sortDirection>ASC</sortDirection>
                                <sortable>true</sortable>
                                <sorted>false</sorted>
                                <type>general</type>
							</column>
                            <column>
                            	<attribute>true</attribute>
                                <dataKey>status</dataKey>
                                <dataType>string</dataType>
                                <dateFormat>DAY_MONTH_YEAR_LONG</dateFormat>
                                <ellipsis>false</ellipsis>
                                <hidden>false</hidden>
                                <sortAs>ALPHA</sortAs>
                                <sortDirection>ASC</sortDirection>
                                <sortable>true</sortable>
                                <sorted>false</sorted>
                                <type>general</type>
                            </column>
                            <column>
                            	<attribute>true</attribute>
                                <dataKey>enabledFrom</dataKey>
                                <dataType>string</dataType>
                                <dateFormat>DAY_MONTH_YEAR_LONG</dateFormat>
                                <ellipsis>false</ellipsis>
                                <hidden>false</hidden>
                                <sortAs>ALPHA</sortAs>
                                <sortDirection>ASC</sortDirection>
                                <sortable>true</sortable>
                                <sorted>false</sorted>
                                <type>general</type>
                             </column>
						</columns>
                        <rowClickActions/>
                        <additionalSearchAttributes/>
                        <displayFrozenOperators>true</displayFrozenOperators>
                        <frozen>NO</frozen>
                        <modes>
                        	<mode>SIMPLE</mode>
                            <mode>FORMULA</mode>
                            <mode>MULTICRITERIA</mode>
                        </modes>
                        <objectReferences/>
					</search>
				</config>
			</editWidget>
		</editor>
        <label></label>
        <lockedInUi>false</lockedInUi>
        <mode>READ_WRITE</mode>
        <multiValued>false</multiValued>
        <override>true</override>
	</config>
    <attributeId>roleBindings</attributeId>
</widget>

XML

<widget id="roleBindings" xsi:type="ctdbum:AttributeEditorWidgetType">
	<hidden>false</hidden>
    <config>
    	<editor>
        	<displayWidget xsi:type="ctdbum:RoleBindingsDisplayWidgetType">
            	<hidden>false</hidden>
                <config/>
			</displayWidget>
		</editor>
        <label></label>
        <lockedInUi>false</lockedInUi>
        <mode>READ</mode>
        <multiValued>false</multiValued>
        <override>true</override>
	</config>
    <attributeId>roleBindings</attributeId>
</widget>