Question Re: Filter missing in task access control in Technology Q&A

Filter missing in task access control

jaisuryan — Thu, 16 Oct 2014 13:57:21 GMT

Hi Experts,

System: SAP IDM 7.2 SP9 patch 7 (MS SQL 2012)

I would like to use SQL to decide who can use my task. However I wouldn't find the 'Filter' option in the "Allow access for" field. Is it no more available for use? I wish this is a bug and they bring this option back in further releases. I want to restrict a task for users who doesn't have the attribute 'MX_AUTHQ_001' set, is there a workaround to achieve this?

Kind regards,

Jaisuryan

Screenshot added: Jai Suryan

Re: Filter missing in task access control

Former Member — Fri, 17 Oct 2014 01:50:12 GMT

Hello Jai,

You need to select the Logged inuser / Identity Store Entry option for Allow access for field. Then you can select the filter option at on behalf of dropdown.

PFB the screenshot for your reference.

~ Krishna.

Re: Filter missing in task access control

Steffi_Warnecke — Fri, 17 Oct 2014 06:50:11 GMT

@Krishna

There is also a filter option for the first dropdown. At least it should be there.

@Jaisuryan

If this is a bug, I wouldn't wait till a new release but open an OSS ticket. We use that filter quite a lot, but I'm on SP8. Somebody on SP9 here, who can check, if they see the option?

I don't think they took this option out, otherwise the field where you put the SQL statement for it would be gone, too.

Did you just update? Maybe something went wrong there.

Regards,

Steffi.

Re: Filter missing in task access control

Former Member — Fri, 17 Oct 2014 07:02:12 GMT

Ohk,

In that case, if you want filter to be listed in the Allow access for drop down itself, you need to uncheck the use simplified access control option on Identity store.

~ Krishna

Re: Filter missing in task access control

terovirta — Fri, 17 Oct 2014 07:05:14 GMT


Jai Suryan wrote:

I would like to use SQL to decide who can use my task. However I wouldn't find the 'Filter' option in the "Allow access for" field. Is it no more available for use? I wish this is a bug and they bring this option back in further releases. I want to restrict a task for users who doesn't have the attribute 'MX_AUTHQ_001' set, is there a workaround to achieve this?

How about just setting privilege/role to the ACLs and assigning that privilege automatically to users? Either to all users and excluding the non-identity type of users or assigning the privilege to the users when the password reset questions are set?

regards, Tero

Re: Filter missing in task access control

jaisuryan — Fri, 17 Oct 2014 07:45:39 GMT

Thanks Krishna, it worked after we checked the option in Identity store. Hopefully it affects the UI performance only for the tasks which has SQL filters.

Hi Steffi,

I wanted to check with experts here before I confirm its a bug. Even a check box can do alot in IDM
Thanks for your help.

Hi Tero,

Seems legit for a workaround but enabling this option can save some work and time. Thanks for your help again.

Re: Filter missing in task access control

former_member2987 — Fri, 17 Oct 2014 12:00:38 GMT

Be careful with this option. I believe its use can affect system performance. I'll have to look through my notes on this. Tero's option is really the best one.

Re: Filter missing in task access control

Former Member — Fri, 17 Oct 2014 14:59:44 GMT

Agree with you Matt. That is the reason it was defaulted to use simple access control.

~ Krishna.