Francesco Chicchiriccò created SYNCOPE-1719:
-----------------------------------------------
Summary: Remove limitations for Group membership
Key: SYNCOPE-1719
URL: https://issues.apache.org/jira/browse/SYNCOPE-1719
Project: Syncope
Issue Type: Improvement
Components: core
Reporter: Francesco Chicchiriccò
Assignee: Francesco Chicchiriccò
Fix For: 3.0.1, 4.0.0
A long while ago some limitations on group members were imposed, e.g.
# A User or an Any Object can be members of Groups in the same realm or in one
of the parent realms.
# A User or an Any object can be in a relation with Any Objects in the same
realm or in one of parent realms.
The rationale behind this was about imposing limitations that could be enforced
with delegated administration.
However, after some thorough review, there seems not to be valid reasons to
maintain such restrictions anymore, as several settings are not available to
design fine-grained delegated administration rights.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)