[SYNCOPE-1719] Remove limitations for memberships and relationships

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.0.1, 4.0.0
• Component/s: core
• Assignee: Francesco Chicchiriccò
• Reporter: Francesco Chicchiriccò
• Created: 03/Jan/23 12:06
• Updated: 13/Jan/23 06:20
• Resolved: 03/Jan/23 15:48

Description

A long while ago some limitations on memberships and relationships were imposed, e.g.

1. A User or an Any Object can be members of Groups in the same realm or in one of the parent realms.
2. A User or an Any object can be in a relation with Any Objects in the same realm or in one of parent realms.

The rationale behind this was about imposing limitations that could be enforced with delegated administration.

However, after some thorough review, there seems not to be valid reasons to maintain such restrictions anymore, as several settings are not available to design fine-grained delegated administration rights.

Issue Links

• links to: GitHub Pull Request #399