Identity and Access Management
Book
MidPoint
- Configuration reference
  - Development
    - Security
      - Authorization
        
        Configuration
        
        selectors
        
        Archetype Clause
        
        Assignee and Candidate Assignee Clause
        
        Delegator Clause
        
        Filter Clause
        
        Org Reference Clause
        
        Org Relation Clause
        
        Owner Clause
        
        Related Object Clause
        
        Requester Clause
        
        Self Clause
        
        Tenant
        
        Type and Parent Clauses
Identity Connectors
Support
Trainings
Evolveum
Community
Library
Case Studies
Talks
Glossary
Frequently Asked Questions
About

Archetype Clause

Last modified 22 Aug 2023 19:13 +02:00

Since 4.0

This functionality is available since version 4.0.

Authorization applies only to objects that have specified archetype.

Listing 1. Authorization applicable to objects with a given archetype.

<authorization>
    <action>...</action>
    <object>
        <archetypeRef oid="00000000-0000-0000-0000-000000000321"/>
    </object>
</authorization>

Archetype specification is multivalued. If more than one archetypeRef is used in the same authorization, then or operation is implied. I.e. match of a single archetypes from the list will make the authorization applicable for the object.