A command of the Page View Task type has the URL property in addition to the common properties. This property identifies the address of the resource, such as a Web page, that the command is intended to open. When the user clicks the command, the Web Interface navigates to the address specified by the URL property.
For more information and instructions on how to implement and use commands of this type, see Developing Custom Web Pages in the Active Roles SDK documentation.
A command of the Set Attribute Task type has the following properties in addition to the common properties:
Attribute to set: The LDAP Display Name of a certain attribute. The command assigns a value to that attribute. You can select the desired attribute from a list.
Value to assign: The command assigns this value to the attribute, or clears the attribute if no value specified. For a Boolean attribute, the value can be either True or False.
Enable confirmation message: When this option is selected, clicking the command displays a certain message to obtain the user's consent.
Confirmation message: Specifies the message to display when the user clicks the command. The user has the option to confirm or cancel the command.
A command on an object in the Web Interface, such as Delete or Rename, can be either visible or hidden. If a command is visible, the user can click the command and have the Web Interface process the command accordingly. If a command is hidden, it is effectively disabled.
Normally, the Web Interface displays or hides a command depending on whether or not the user has sufficient rights to perform the respective operation on the object that the user has selected (for example, delete or rename the object). However, certain scenarios may require that a particular command be hidden or displayed depending on the properties of the selected object. Another requirement could be to hide or display a command depending on whether or not the user is authorized to make certain changes to the selected object.
To address these requirements, the Web Interface provides a number of options that control the visibility of a command to the user. The visibility options on a command take the form of conditions that are evaluated when a particular user selects a particular object in the Web Interface. Assuming the command is applicable to the type of the selected object, the command is displayed if each of the conditions evaluates to True.
By setting up the appropriate conditions on a command, the administrator can control the visibility of the command in the following ways:
Show the command if the properties of the selected object meet certain requirements (for example, the description of the object is set to the text string specified); otherwise, hide the command. The conditions that control the command visibility in this way are referred to as property-related conditions.
Show the command if the user is authorized to modify certain properties of the selected object (for example, the user is authorized to change the description of the object); otherwise, hide the command. The conditions that control the command visibility in this way are referred to as access-related conditions.
It is possible to set up only property-related conditions, only access-related conditions, or both. The command is displayed if all the specified conditions evaluate to True. If at least one of the specified conditions is not met, the command is hidden.
To configure visibility options on a Web Interface command
In the Active Roles Web Interface, click Customization.
In the Customization section of the Web Interface, select the command that you want to configure.
Click the Visibility tab on the page for managing the properties of the command.
Select the option to set up visibility conditions.
To set up property-related conditions, click Configure.
Add or remove a visibility condition as follows:
To add a condition, select a property, type in a value, and click Add Requirement.
To remove a condition, select it from the list and click Remove.
When finished, click OK.
When you select a property and supply a value, either a new condition is added to the list or the supplied value is added to the existing condition that is based on the selected property. The latter occurs if the property is already in the list of the property-related conditions. This allows you to configure a condition that evaluates to True if the property has any one of the values specified. If only one value is supplied for a particular condition, then the condition evaluates to True if the property has exactly the value specified.
To add or remove access-related conditions, do the following:
If you want to add a condition, click Add, select a certain property, and click OK.
If you want to remove a condition, select it from the list and click Remove.
When you select a property and click OK, a new condition is added that evaluates to True if the user has sufficient rights in Active Roles to make changes to that property of the object selected by the user in the Web Interface.
Click Save. Then, click Reload to publish your changes.
This section provides the following example Web Interface customization scenarios:
© 2024 One Identity LLC. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center
