Hi indhupriya,

what youare asking is not possible to do in an easyway.
It requires you to customize the admin forms according to specific role.
To do that, you can use the Admin console and access**Configuration** -> **Administration** -> **Roles** tab, create a new Role, click on it and select *layout*.
You'll se something like [1].
There you'll be able to customizethe **UserWizardBuilder** form (andalso /Plain/ /Attributes/by editing the **whichPlainAttrs** property).

It's not necessary to set fields as **read-onl**y**, doing it will just force those schemas to be editable only by using DAO.

Then, if that layout customization is not enough for you, you can also extends the **org.apache.syncope.client.console.wizards.any.UserWizardBuilder** class to gain more control on forms.Inthis case you'll want to edit **"formClass" : "org.apache.syncope.client.console.wizards.any.UserWizardBuilder"**, adding your new class.

Best regards,
Matteo Alessandroni

[1] https://ibb.co/dAEGgm


On 17/01/2018 10:56, indhupriya wrote:
My requirement is to have an additional "admin" user, who will be able to
update only certain fields of "Plain Attributes" in particular realm. By
giving "USER_UPDATE" entitlement in "*Roles*" , it is possible for the
additional "admin" user to *update all the user details* in "Plain
Attributes" for that realm.

But, Is it possible to make only certain fields in "Plain Attributes" as
editable (other fields will/should be updated only based on provisioning
done via connectors)?

If we give the fields as "*read-only*" in schema, then these fields are not
updating even via provisioning.

Is there any other way to achieve this?

Thanks in advance

--
Sent from: http://syncope-user.1051894.n5.nabble.com/

--

Dott. Matteo Alessandroni

Software Engineer @ Tirasa S.r.l.

Viale D'Annunzio 267 - 65127 Pescara
Tel +39 0859116307 / FAX +39 0859111173

http://www.tirasa.net

Tirasa S.r.l. <http://www.tirasa.net>

Reply via email to