[SYNCOPE-731] Fine-grained entitlements for any objects

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.0.0-M1
• Assignee: Francesco Chicchiriccò
• Reporter: Francesco Chicchiriccò
• Created: 14/Nov/15 17:18
• Updated: 23/Dec/15 07:04
• Resolved: 14/Nov/15 17:33

Description

Current entitlements for any objects are managed as for users and groups; as a result, if the ANY_OBJECT_CREATE entitlement is owned, one can create instances of all any types defined.

We need to change this to a more fine-grained management so that entitlements are defined for each any type defined: no more ANY_OBJECT_CREATE but rather PRINTER_CREATE, FOLDER_CREATE and so on.

Issue Links

• is related to: SYNCOPE-666 Any objects