New in v4.2.1.9

Version 4.2.1.9 contains minor upgrades and security and vulnerability fixes. The full set of changes can be found in the change log. The sections below provide an overview of the improvements.

If you are using Java and .net connectors, update them to the newest connector version. The connectors are available in a release.

Scripts

Two new groovy scripts were added iamscripts/bpm/CustomManageAccessApproverAssociationIdentifier.groovy.

package bpm
import org.openiam.bpm.util.ActivitiRequestType
import org.openiam.workflow.activiti.groovy.CreateUserRequestResourceOwnerApproverAssociationIdentifier;
class CustomManagingAccessIdentifier extends CreateUserRequestResourceOwnerApproverAssociationIdentifier {
@Override
public void calculateApprovers() {
switch (model.getActivitiRequestType()) {
case ActivitiRequestType.REVOKE_ACCESS:
println("This is REVOKE_ACCESS")
//do something special
break
case ActivitiRequestType.REVIEW_ASSESS_ON_POSITION_CHANGE:
//do something special
println("This is POSITION_CHANGE")
break
}
super.calculateApprovers();
}
}

And iamscripts/bpm/CustomTerminationAccessApproverAssociationIdentifier.groovy.

package bpm
import org.openiam.workflow.activiti.groovy.TerminateUserApproverAssociationIdentifier
class CustomTerminateIdentifier extends TerminateUserApproverAssociationIdentifier {
@Override
void calculateApprovers() {
super.calculateApprovers();
}
}

These scripts type in general provide option to re-write and customize definition of approval flow of the request. They let set up more complex logic then UI of approver association provides. The CustomManageAccessApproverAssociationIdentifier is dedicated to REVOKE_ACCESS and POSITION_CHANGE workflows and CustomTerminationAccessApproverAssociationIdentifier is dedicated to Termiantion request.