[
https://issues.apache.org/jira/browse/FC-119?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14745536#comment-14745536
]
Shawn McKinney commented on FC-119:
-----------------------------------
I wouldn't call the relationship between the temporal constraints on a role and
corresponding user-roles as inheritance. Rather the default is set on the role
and the administrator may change those settings on assignment.
I agree this is confusing and needs to be clarified. I believe the best way is
to add a 'push' operation on the role page in fortress-web. That would make
the distinction between what is on the role, and what is on the user-role
explicit to the end user and hopefully will help eliminate confusion.
Incidentally this same behavior applies between admin-roles and
user-admin-roles so same push functionality should work there as well.
Maybe we also add some way to scope the push. There could be a drop-down where
user-orgs are selected for target of push. How else can this be done? I don't
think you necessarily want to push the role temporal to all user's. Think of
shift workers like nurses. They all have the same role, e.g. floor-nurse, but
some work days and some work nights. Pushing the same constraints to all would
essentially bar one or the other from signing on.
> Allow pushing constraints to user role assignments when updating role
> constraint
> --------------------------------------------------------------------------------
>
> Key: FC-119
> URL: https://issues.apache.org/jira/browse/FC-119
> Project: FORTRESS
> Issue Type: New Feature
> Reporter: Chris Pike
> Priority: Minor
>
> It is my understanding the user role assignments inherit the temporal
> constraints from the role and that updating the temporal constraints on the
> role after the assignment has no effect on the user role assignment
> constraint.
> This is confusing to someone updating temporal role constraints who doesn't
> understand this behaviour. It need to be made clearer in the UI and may be
> beneficial to provide a mechanism to push updated constraints to the user
> role assignments.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
