Version 4.2.1.9 contains minor upgrades and security and vulnerability fixes. The full set of changes can be found in the change log. The sections below provide an overview of the improvements.

If you are using Java and .net connectors, update them to the newest connector version. The connectors are available in a release.

Scripts

Two new groovy scripts were added iamscripts/bpm/CustomManageAccessApproverAssociationIdentifier.groovy.

package bpm
import org.openiam.bpm.util.ActivitiRequestType
import org.openiam.workflow.activiti.groovy.CreateUserRequestResourceOwnerApproverAssociationIdentifier;
class CustomManagingAccessIdentifier extends CreateUserRequestResourceOwnerApproverAssociationIdentifier {
    @Override
    public void calculateApprovers() {
        switch (model.getActivitiRequestType()) {
            case ActivitiRequestType.REVOKE_ACCESS:
                println("This is REVOKE_ACCESS")
                //do something special
                break
            case ActivitiRequestType.REVIEW_ASSESS_ON_POSITION_CHANGE:
                //do something special
                println("This is POSITION_CHANGE")
                break
        }
        super.calculateApprovers();
    }
}

And iamscripts/bpm/CustomTerminationAccessApproverAssociationIdentifier.groovy.

package bpm
import org.openiam.workflow.activiti.groovy.TerminateUserApproverAssociationIdentifier
class CustomTerminateIdentifier extends TerminateUserApproverAssociationIdentifier {
    @Override
    void calculateApprovers() {
        super.calculateApprovers();
    }
}

These scripts type in general provide option to re-write and customize definition of approval flow of the request. They let set up more complex logic then UI of approver association provides. The CustomManageAccessApproverAssociationIdentifier is dedicated to REVOKE_ACCESS and POSITION_CHANGE workflows and CustomTerminationAccessApproverAssociationIdentifier is dedicated to Termiantion request.