AuthorizationType (Complex Type)

Namespace: http://midpoint.evolveum.com/xml/ns/public/common/common-3

Authorization define fine-grained access to midPoint objects and system functionality.

Item Summary  
Name Type Multiplicity Description
name property
string
[0,1]  
description property
string
[0,1] Free-form textual description of the object. 
documentation property
string
[0,1] Technical documentation for a particular object or construct. 
decision property
AuthorizationDecisionType
[0,1] Decision that this authorization specifies. 
action property
anyURI
[1,-1] Action part from the (subject,action,object) authorization triple. 
phase property
AuthorizationPhaseType
[0,1] Specifies when to conduct authorization and what exactly to authorize. 
enforcementStrategy property
AuthorizationEnforcementStrategyType
[0,1] Setting that specifies when to enforce the authorization. 
zoneOfControl property
ZoneOfControlType
[0,1]  
object container
OwnedObjectSelectorType
[0,-1] Object part from the (subject,action,object) authorization triple. 
item property
ItemPathType
[0,-1] Specification of items that form a scope of this authorization. 
exceptItem property
ItemPathType
[0,-1] Specification of items that are excluded from the scope of this authorization. 
target container
OwnedObjectSelectorType
[0,-1] Target of the operation. 
relation property
QName
[0,-1] Relation(s) to which the authorization applies. 
orderConstraints container
OrderConstraintsType
[0,1] Order constraints for cases when assignment/inducement is a matter of the authorization decision. 
limitations container
AuthorizationLimitationsType
[0,1] Limitations of this authorization when it is applied to other authorizations.