You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@syncope.apache.org by "Francesco Chicchiriccò (Jira)" <ji...@apache.org> on 2023/01/03 12:07:00 UTC

[jira] [Created] (SYNCOPE-1719) Remove limitations for Group membership

Francesco Chicchiriccò created SYNCOPE-1719:
-----------------------------------------------

             Summary: Remove limitations for Group membership
                 Key: SYNCOPE-1719
                 URL: https://issues.apache.org/jira/browse/SYNCOPE-1719
             Project: Syncope
          Issue Type: Improvement
          Components: core
            Reporter: Francesco Chicchiriccò
            Assignee: Francesco Chicchiriccò
             Fix For: 3.0.1, 4.0.0


A long while ago some limitations on group members were imposed, e.g.

# A User or an Any Object can be members of Groups in the same realm or in one of the parent realms.
# A User or an Any object can be in a relation with Any Objects in the same realm or in one of parent realms.

The rationale behind this was about imposing limitations that could be enforced with delegated administration.

However, after some thorough review, there seems not to be valid reasons to maintain such restrictions anymore, as several settings are not available to design fine-grained delegated administration rights.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)